This is my first post, so I'm a bit of a newbie around here, but I'll try and do my best to conform to what is needed to answer my question.
Ok, some background:
I have been setting up a new network for work in a test environment. Currently we operate on a Windows 2003 environment.
So considering that MS is discontinuing support for Windows XP, and to stop our own staff upgrading to Windows 7 without authorisation (we work at an IT company with lax standards, and poor group policy)
I am now setting up 3 domain controllers based on Windows 2008 Enterprise Edition.
1 of these will be based in Auckland, NZ, with a site-to-site link to Wellington, NZ. This isn't a problem, I have already completed this phase in trial and test environments, works a treat. Horrible to setup, a Secure IPsec link. But done.
So taking the 3 servers back to the test environment, I have configured our routers to simulate the AKL-WGN environment.
Everything is working fine... here is the configuration:
1 AKL DC
Setting up Windows 2008 has been pretty much a nightmare, I'm not sure wether this is because I'm using 2 different subnets or it's generally a bitch? But on first installs I spent literally hours fixing event log issues.
So, at this stage, I have a few questions that need to be answered.
1. Why do we have _msdcs under our main domain zone when we have an _msdcs zone? Is this needed or just provided for backwards compatibilty? If we are no longer going to have any ex-win7 clients, is it neccassary? This is not answered anywhere I could see, in fact the reverse, which caused me to delete the main zone and headaches. Lets get some resolval in this area that addresses both those who are doing a win7 only environment and vice versa.
2. I love this new Group Policy Preferences area that has been 'acquired' by Microsoft but really, does it work?! I spent alot of time yesturday to install all our printers on server01 and then spent the same amount of time to setup GPP. Only to find that any test user logging in gets a "Printer Name Invalid" in the event log. I changed the name/share name to be really short. No Dice. Dosn't work, I looked up this problem, and can not get it to work, Shall I resort back to Powershell or Bat scripts?
3. On my File server, which I'm setting up at the same time. So this is server 4. When I click on any link in the start menu, I am asked by Windows that this is an Unsigned Publisher. Yes you might think this is simple. Which it is, because I have set network wide policy to use the same damn server it is complaining about!! I have done the Zone assignment setting that most articles advise to do! But on this particular server, it still complains. I joined a laptop to the domain today and it had no problems, shall I just ignore this servers' problem or could it be a start to a bigger problem? lol
Anyway team, I hope ya can help me. And if anymore Info is needed. Let me know.