Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 377
  • Last Modified:

Group Policy Questions

Hi,

I have a bunch of servers including an 2008R2 Domain Controller, some Terminal Servers and about 60 users all using Windows XP to which i wish to setup GPO's for.

Currently all users have Power User rights manually selected in their XP machines, no GPO's are applied. I'd like to setup some GPO's now but need a little guidance.

1) Is is best to leave all the workstations with manually selected Power Users group?
2) Do i create one OU and GPO for all Workstations and another for say the Terminal Servers?

I wish all users to be able to install printers but no other software etc.

Cheers.
0
tmaster100
Asked:
tmaster100
  • 2
1 Solution
 
Kevin HaysIT AnalystCommented:
I would start with creating an OU for servers, an OU for workstations.
Then link and create GPO's for servers and same for workstations.  I would probably create a startup script for the server OU and also create a security group in AD for the people who needed to install printers.  For example, PrintInstallers=people who need to install printers.  Add that group to the power users group on startup.

That's just an example, many ways to do it, but I would create an OU for the server and OU for workstations for sure.

Kevin
0
 
yo_beeDirector of ITCommented:
Your first part of your question is confusing me.  I am not sure what you mean by Manually  select Power Users

To your second question.
I do recommend that you have a GPO linked to your workstation and one to your terminal server.

Setting up two OU's to address this is the way togo.
I cannot see you giving users Power User Rights to a server as you would to a workstation.
0
 
Kevin HaysIT AnalystCommented:
I have to agree also, I don't have any users in my domain or do I ever unless absolutely necessary give any user any rights above a regular user on a server.  I did have to give one user power user rights on a TS to be able to run quickbooks the way it's suppose to.
0

Featured Post

[Webinar] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now