[Last Call] Learn about multicloud storage options and how to improve your company's cloud strategy. Register Now

x
?
Solved

Group policy & network installations for Windows Vista Business machines from Windows Small Business Server 2008

Posted on 2009-07-15
4
Medium Priority
?
269 Views
Last Modified: 2012-05-07
Hi Experts,

I have little or no knowledge in Small Business Server 2008, Group policies and network installations so sorry in advance for my ignorance.

I have about 10 machines I wish to connect to a server, most of which I hope will have limited rights. I would like to allow some machines to connect to the internet though the server and others not.

I would like to disallow some users from changing settings on their machine aswell as installing software (can this simply be done through a limited user account?). Another thing I would like to to only allow specific applications to executed and to block certain websites. Is it possible to have a different list of websites to block for different policies?

I also would like to be able to install to these machines from the server using a network installation, is this possible?

There will probably be other rights I want to set but rather than listing them all here, I can probably learn after being guided in the right direction.

Thanks for your help in advance,

Tom
0
Comment
Question by:TommyTwoPints
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 23

Expert Comment

by:rhandels
ID: 24857214
Hey Tom,

What you are asking here is how do i setup a domain with the hole enchilada on it...

To give you some headsup info i'll try and start here... Please feel free to ask but also try and look into some isseus using Microsoft's whitepapers..

The only difference between SBS and "normal" server versions is that SBS can only hold a max of 75 domain users and all software is installed on 1 server. Depending your SBS version you will have Exchange and/or SQL etc on that machine. So if you designed domain with normal servers you don;t have that much issues..

Regarding all the settings you want for users look at policies.. Setting up policies is not that hard to do. Policies will restict users in everything you would like to restict them. From startign up applcaitions to installing them to disabling a bunch of features on their workstation..

Installing Vista machines using Microsoft is possible and also free of charge :) Try looking into WDS (Windows Deployment Servcies).

For blocking websites and so on i would use ISA if this is installed on the SBS server. Else you should look into soemthing like ISA to block internet access.

If you have never ever before created a domain or did anythign with networking i'd suggest you at least ask someone who has done so before for a bit of help..
0
 
LVL 3

Author Comment

by:TommyTwoPints
ID: 24857362
Thanks Rhandels,

I do have someone I can ask for help but he is located on the other side of the world so i thought I would ask and read as much as possible before bothering him.

The server installation won't go ahead until late september but is it possible to create the policies on a local machine and export it to the others or is it better to control this from the server itself?

I don't need to install the client O/S from the server, I will be doing this manually but I would like to be able to roll out updates, bought software, virus definitions from the server itself. I want to do this so I can access the server remotely from my home which means I don't have to be in the office.  

I have ISA already so I will read up on this. If possible, could you direct me to the relevant white papers?

Thanks again

Tom
0
 
LVL 23

Accepted Solution

by:
rhandels earned 2000 total points
ID: 24857433
"The server installation won't go ahead until late september but is it possible to create the policies on a local machine and export it to the others or is it better to control this from the server itself?"
Create them on the server itself. Or either get a workstation, install SBS onthere for testing, create the policy there and export it. Then import it on the production machine. It is possible to create them on a Vista workstation and then import tehn into Server 2008 but i'm not a big fan of that..

"I don't need to install the client O/S from the server, I will be doing this manually but I would like to be able to roll out updates, bought software, virus definitions from the server itself. I want to do this so I can access the server remotely from my home which means I don't have to be in the office.  "

You could use AD to install and update applications, it has a very simple (not easy, but barely non functions on it) solutions for installing applications. Updates can be done using WSUS (Windows Software Update Services), this is a free tool of Microsoft. Most virus scan solutions have some sort of distribution system, it's best to use it's own dist system..

"I have ISA already so I will read up on this. If possible, could you direct me to the relevant white papers?"
To be honest i don;t think there is just 1 whitepaper for installing your entire ISA server because all setups are very different.. http://www.isaserver.org is a very good site to start from.
0
 
LVL 3

Author Comment

by:TommyTwoPints
ID: 24857443
Thanks very much for your help rhandels
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Written by Glen Knight (demazter) as part of a series of how-to articles. Introduction One of the biggest consumers of disk space with Small Business Server 2008(SBS) is Windows Server Update Services, more affectionately known as WSUS. For t…
The articles for turning off the Client firewall policy on the internet are for SBS 2008 and don't really help for SBS 2011. They actually moved the Client firewall policy. In 2011, the client firewall policy has moved to the SBS computers conta…
This course is ideal for IT System Administrators working with VMware vSphere and its associated products in their company infrastructure. This course teaches you how to install and maintain this virtualization technology to store data, prevent vuln…
In response to a need for security and privacy, and to continue fostering an environment members can turn to for support, solutions, and education, Experts Exchange has created anonymous question capabilities. This new feature is available to our Pr…

650 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question