Group Policy Questions


I have a bunch of servers including an 2008R2 Domain Controller, some Terminal Servers and about 60 users all using Windows XP to which i wish to setup GPO's for.

Currently all users have Power User rights manually selected in their XP machines, no GPO's are applied. I'd like to setup some GPO's now but need a little guidance.

1) Is is best to leave all the workstations with manually selected Power Users group?
2) Do i create one OU and GPO for all Workstations and another for say the Terminal Servers?

I wish all users to be able to install printers but no other software etc.

Who is Participating?
Kevin HaysIT AnalystCommented:
I would start with creating an OU for servers, an OU for workstations.
Then link and create GPO's for servers and same for workstations.  I would probably create a startup script for the server OU and also create a security group in AD for the people who needed to install printers.  For example, PrintInstallers=people who need to install printers.  Add that group to the power users group on startup.

That's just an example, many ways to do it, but I would create an OU for the server and OU for workstations for sure.

yo_beeDirector of Information TechnologyCommented:
Your first part of your question is confusing me.  I am not sure what you mean by Manually  select Power Users

To your second question.
I do recommend that you have a GPO linked to your workstation and one to your terminal server.

Setting up two OU's to address this is the way togo.
I cannot see you giving users Power User Rights to a server as you would to a workstation.
Kevin HaysIT AnalystCommented:
I have to agree also, I don't have any users in my domain or do I ever unless absolutely necessary give any user any rights above a regular user on a server.  I did have to give one user power user rights on a TS to be able to run quickbooks the way it's suppose to.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.