Solved

Group policy & network installations for Windows Vista Business machines from Windows Small Business Server 2008

Posted on 2009-07-15
4
245 Views
Last Modified: 2012-05-07
Hi Experts,

I have little or no knowledge in Small Business Server 2008, Group policies and network installations so sorry in advance for my ignorance.

I have about 10 machines I wish to connect to a server, most of which I hope will have limited rights. I would like to allow some machines to connect to the internet though the server and others not.

I would like to disallow some users from changing settings on their machine aswell as installing software (can this simply be done through a limited user account?). Another thing I would like to to only allow specific applications to executed and to block certain websites. Is it possible to have a different list of websites to block for different policies?

I also would like to be able to install to these machines from the server using a network installation, is this possible?

There will probably be other rights I want to set but rather than listing them all here, I can probably learn after being guided in the right direction.

Thanks for your help in advance,

Tom
0
Comment
Question by:TommyTwoPints
  • 2
  • 2
4 Comments
 
LVL 23

Expert Comment

by:rhandels
ID: 24857214
Hey Tom,

What you are asking here is how do i setup a domain with the hole enchilada on it...

To give you some headsup info i'll try and start here... Please feel free to ask but also try and look into some isseus using Microsoft's whitepapers..

The only difference between SBS and "normal" server versions is that SBS can only hold a max of 75 domain users and all software is installed on 1 server. Depending your SBS version you will have Exchange and/or SQL etc on that machine. So if you designed domain with normal servers you don;t have that much issues..

Regarding all the settings you want for users look at policies.. Setting up policies is not that hard to do. Policies will restict users in everything you would like to restict them. From startign up applcaitions to installing them to disabling a bunch of features on their workstation..

Installing Vista machines using Microsoft is possible and also free of charge :) Try looking into WDS (Windows Deployment Servcies).

For blocking websites and so on i would use ISA if this is installed on the SBS server. Else you should look into soemthing like ISA to block internet access.

If you have never ever before created a domain or did anythign with networking i'd suggest you at least ask someone who has done so before for a bit of help..
0
 
LVL 3

Author Comment

by:TommyTwoPints
ID: 24857362
Thanks Rhandels,

I do have someone I can ask for help but he is located on the other side of the world so i thought I would ask and read as much as possible before bothering him.

The server installation won't go ahead until late september but is it possible to create the policies on a local machine and export it to the others or is it better to control this from the server itself?

I don't need to install the client O/S from the server, I will be doing this manually but I would like to be able to roll out updates, bought software, virus definitions from the server itself. I want to do this so I can access the server remotely from my home which means I don't have to be in the office.  

I have ISA already so I will read up on this. If possible, could you direct me to the relevant white papers?

Thanks again

Tom
0
 
LVL 23

Accepted Solution

by:
rhandels earned 500 total points
ID: 24857433
"The server installation won't go ahead until late september but is it possible to create the policies on a local machine and export it to the others or is it better to control this from the server itself?"
Create them on the server itself. Or either get a workstation, install SBS onthere for testing, create the policy there and export it. Then import it on the production machine. It is possible to create them on a Vista workstation and then import tehn into Server 2008 but i'm not a big fan of that..

"I don't need to install the client O/S from the server, I will be doing this manually but I would like to be able to roll out updates, bought software, virus definitions from the server itself. I want to do this so I can access the server remotely from my home which means I don't have to be in the office.  "

You could use AD to install and update applications, it has a very simple (not easy, but barely non functions on it) solutions for installing applications. Updates can be done using WSUS (Windows Software Update Services), this is a free tool of Microsoft. Most virus scan solutions have some sort of distribution system, it's best to use it's own dist system..

"I have ISA already so I will read up on this. If possible, could you direct me to the relevant white papers?"
To be honest i don;t think there is just 1 whitepaper for installing your entire ISA server because all setups are very different.. http://www.isaserver.org is a very good site to start from.
0
 
LVL 3

Author Comment

by:TommyTwoPints
ID: 24857443
Thanks very much for your help rhandels
0

Featured Post

Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

Join & Write a Comment

I've often see, or have been asked, the question about the difference between the Exchange 2010 SP1 version, available as part of Small Business Server (SBS) 2011, and the “normal” Exchange 2010 SP1 Standard. The answer to the question is relativ…
Because virtualization becomes more and more common, and, with Microsoft Hyper-V included in Windows Server at no additional costs, and, most server hardware nowadays is more than capable of running a physical Small Business Server (SBS) 2008 or 201…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now