asked on

GPMC Newbie Question

I'm pretty new to group policies. I've dabbled with disabling Windows features and such, but never used GPO's for their true potential. I want to implement a group policy server on my network, mostly for the purpose of publishing software to AD users and assigning printers. My network still has a Windows 2003 domain controller at the heart of it, but there are several Windows 2008 R2 servers as well. My question is, where would I install the GPMC features? Do they need installed on the DC, or can I install it on any server?

Joseph Moody

Group policy is already installed when you set up a domain. On a windows 7 machine, install RSAT. This will give you the group policy management console.

ASKER CERTIFIED SOLUTION

Brian Pierce

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ND02G

ASKER

Thanks KCTS, that question being answered.. Would it be better practice to have an entire server dedicated to group policies? Or is that overkill? I have maybe 200 AD users total...

Mike Kline

Good screenshots of the GPMC install in 2008 R2 http://www.gpanswers.com/home/135-gpmc/668-group-policy-the-gpmcits-part-of-the-operating-system.html

If you are new to group policy the most important thing is always try and test first before deploying a policy. (even if it is just to test OU if you don't have a lab)

You may also want to look into some of these resources http://adisfun.blogspot.com/2009/07/group-policy-recomendations.html

Thanks

Mike

kevinhsieh

You should install on Windows 7 and/or Windows 2008 R2. You won't have access to all of the policy settings if you are doing configuration from XP/2003.

To do printer assignments your XP clients need to be running SP3 (which they should be anyway) and Group Policy Preferences. It can be installed manually or through WSUS. I don't know if a machine just using Automatic Updates will get it.

Brian Pierce

The Group policies will be stored on the DC(s) - The GPMC simply allows them to be edited - they will still be stored on the DC(s) even if you enit them from another machine.

ND02G

ASKER

I'll be handing out 500 points questions all week until I get this up and running. If anyone wants to follow me on EE and lend a hand, it will be rewarded nicely :)