Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1131
  • Last Modified:

Using RSAT on Windows 2003 Domain

i am finally getting windows 7 deployed in my domain and have a few questions about how the old XP clients will or will not use the Central Store.
1. by populating the central store with the ADMX files will they override any of the ADM policy's for the XP machines?
2. will the XP clients ignore the ADMX files?
3.should i keep the WIN7 machines in a different OU structure from the XP machines?
4. any other issue you may know of other gotcha's you have found in deploying RSAT on a 2003 domain
0
Cecilpierce
Asked:
Cecilpierce
2 Solutions
 
Cliff GaliherCommented:
1. adm (and admx files) do not enforce group policies. All they do is provide contextual information to GPMC so that the policies can be read and interpreted by human beings. The policy settings themselves are embedded in the specific OS, so you can copy adm and admx files all day and you won't override any existing policies.
2. As explained by #1, client machines do not read adm or admx files when reading group policies for enforcement purposes. Only the GPMC reads adm(x) files. Thus all of your client OSs will ignore the admx files, not just the XP ones.
3. Under normal circumstances I see no benefit in keeping machines of a different OS in a separate OU. In rare cases I suppose there is a possible benefit, but in most cases a WMI filter to would be the better option for OS targeting.
4. Most of the RSAT tools expect 2008 so many features will not work or will not work as expected. Just be prepared for that...
-Cliff
 
0
 
Hypercat (Deb)Commented:
1.  No - these files are used only for the purpose of setting up group policies. The GPMC reads these files. The workstation itself does not read or interpret these files directly.
2. XP machines will ignore any group policies that don't apply to that OS.
3. No reason to put Win7 machines in a different OU unless you want to apply different group policies to those machines.
4. Nope - the GPMC and other RSAT tools work perfectly well in a Windows 2003 domain. The look and feel is different, however, so you may find that you have a bit of an adjustment using the RSAT tools for managing a Win2003 domain.
0

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now