?
Solved

Group policy & network installations for Windows Vista Business machines from Windows Small Business Server 2008

Posted on 2009-07-15
4
Medium Priority
?
264 Views
Last Modified: 2012-05-07
Hi Experts,

I have little or no knowledge in Small Business Server 2008, Group policies and network installations so sorry in advance for my ignorance.

I have about 10 machines I wish to connect to a server, most of which I hope will have limited rights. I would like to allow some machines to connect to the internet though the server and others not.

I would like to disallow some users from changing settings on their machine aswell as installing software (can this simply be done through a limited user account?). Another thing I would like to to only allow specific applications to executed and to block certain websites. Is it possible to have a different list of websites to block for different policies?

I also would like to be able to install to these machines from the server using a network installation, is this possible?

There will probably be other rights I want to set but rather than listing them all here, I can probably learn after being guided in the right direction.

Thanks for your help in advance,

Tom
0
Comment
Question by:TommyTwoPints
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 23

Expert Comment

by:rhandels
ID: 24857214
Hey Tom,

What you are asking here is how do i setup a domain with the hole enchilada on it...

To give you some headsup info i'll try and start here... Please feel free to ask but also try and look into some isseus using Microsoft's whitepapers..

The only difference between SBS and "normal" server versions is that SBS can only hold a max of 75 domain users and all software is installed on 1 server. Depending your SBS version you will have Exchange and/or SQL etc on that machine. So if you designed domain with normal servers you don;t have that much issues..

Regarding all the settings you want for users look at policies.. Setting up policies is not that hard to do. Policies will restict users in everything you would like to restict them. From startign up applcaitions to installing them to disabling a bunch of features on their workstation..

Installing Vista machines using Microsoft is possible and also free of charge :) Try looking into WDS (Windows Deployment Servcies).

For blocking websites and so on i would use ISA if this is installed on the SBS server. Else you should look into soemthing like ISA to block internet access.

If you have never ever before created a domain or did anythign with networking i'd suggest you at least ask someone who has done so before for a bit of help..
0
 
LVL 3

Author Comment

by:TommyTwoPints
ID: 24857362
Thanks Rhandels,

I do have someone I can ask for help but he is located on the other side of the world so i thought I would ask and read as much as possible before bothering him.

The server installation won't go ahead until late september but is it possible to create the policies on a local machine and export it to the others or is it better to control this from the server itself?

I don't need to install the client O/S from the server, I will be doing this manually but I would like to be able to roll out updates, bought software, virus definitions from the server itself. I want to do this so I can access the server remotely from my home which means I don't have to be in the office.  

I have ISA already so I will read up on this. If possible, could you direct me to the relevant white papers?

Thanks again

Tom
0
 
LVL 23

Accepted Solution

by:
rhandels earned 2000 total points
ID: 24857433
"The server installation won't go ahead until late september but is it possible to create the policies on a local machine and export it to the others or is it better to control this from the server itself?"
Create them on the server itself. Or either get a workstation, install SBS onthere for testing, create the policy there and export it. Then import it on the production machine. It is possible to create them on a Vista workstation and then import tehn into Server 2008 but i'm not a big fan of that..

"I don't need to install the client O/S from the server, I will be doing this manually but I would like to be able to roll out updates, bought software, virus definitions from the server itself. I want to do this so I can access the server remotely from my home which means I don't have to be in the office.  "

You could use AD to install and update applications, it has a very simple (not easy, but barely non functions on it) solutions for installing applications. Updates can be done using WSUS (Windows Software Update Services), this is a free tool of Microsoft. Most virus scan solutions have some sort of distribution system, it's best to use it's own dist system..

"I have ISA already so I will read up on this. If possible, could you direct me to the relevant white papers?"
To be honest i don;t think there is just 1 whitepaper for installing your entire ISA server because all setups are very different.. http://www.isaserver.org is a very good site to start from.
0
 
LVL 3

Author Comment

by:TommyTwoPints
ID: 24857443
Thanks very much for your help rhandels
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This guide is intended for migrating Windows 2003 Standard with Exchange 2003 to Windows Small Business Server 2008. You will need the following: Exchange Best Practice Analyzer: http://www.microsoft.com/downloads/details.aspx?FamilyID=DBAB201F-…
The SBS 2011 release date (RTM) is supposed to be around Christmas, 2011.  This article is a compilation of my notes -- things I have learned first hand.  The items are in a rather random order, but I think this list covers most of what is new and d…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
In this video, Percona Director of Solution Engineering Jon Tobin discusses the function and features of Percona Server for MongoDB. How Percona can help Percona can help you determine if Percona Server for MongoDB is the right solution for …
Suggested Courses
Course of the Month11 days, 3 hours left to enroll

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question