Solved

Add Windows 8 GPO settings to Windows 2008 R2

Posted on 2013-10-29
6
968 Views
Last Modified: 2013-11-05
Hello,

Hopefully somebody can help me with the following:

I want to manage the following setting via a domain GPO:

Computer Configuration > Policies > Windows Settings > Security Settings > Local Policies > Security Options > Accounts: Block Microsoft accounts

I have installed the Administrative Templates (.admx) for Windows 8 and Windows Server 2012 on the Windows 2008 R2 server and placed the admx files in the sysvol folder. But the setting is not there. Is there anything else I need to do?

Thanks for any help
0
Comment
Question by:P-R-W
  • 3
  • 2
6 Comments
 
LVL 53

Accepted Solution

by:
Will Szymkowski earned 300 total points
ID: 39610597
If you are looking to distribute GPO's to Windows 8/2012 machines then you are going to have to administer your GPO's from one of these clients. I would install AdminTools a long with GPMC (group policy management console) on a Win8 machine and then have this machine designated for GPO changes when you are pushing policies out to Windows 8 or Server 2012. This way you do not need to use the ADMX files.

Will.
0
 
LVL 53

Expert Comment

by:McKnife
ID: 39611580
Just a small addition: "AdminTools" are this, I assume: http://www.microsoft.com/en-us/download/details.aspx?id=28972 (RSAT for win8). There is also a new version out which suits for 8.1
0
 

Author Comment

by:P-R-W
ID: 39612214
This way it possible, but the settings can not be seen on my Domain Controller. Is there a way to update the DC  with the latest ADMX files so that i can manage GPO from DC? Prefer not to manage from a workstation...
0
What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 53

Expert Comment

by:McKnife
ID: 39612230
> Prefer not to manage from a workstation...
Why not? What are your concerns, if I may ask?

You will be able to use the DC if you use a central store like described here: http://blogs.technet.com/b/craigf/archive/2012/08/28/upgrading-the-admx-central-store-files-from-windows-7-2008r2-to-windows-8-2012.aspx
0
 

Author Comment

by:P-R-W
ID: 39613735
@McKnife: My concern is that I cannot manage it via my WS / laptop. I manage 10 individual domains of which my laptop is not a member. Then I need to have in every domain a WS where I need to put the tools on. Not very handy when I manage all other settings via the DC.

Have tried the central store and it updates the Adminitstrative Templates but not the Windows settings area within the editor.
0
 
LVL 53

Assisted Solution

by:McKnife
McKnife earned 200 total points
ID: 39613851
Hmm, I only use RSAT, myself.
About your concerns: Please try it. No matter how many domains you manage, you only need one win8´and you are good to go. Save one configured mmc for each domain, start the mmc and connect using the domain admin pw.
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Security measures require Windows be logged in using Standard User login (not Administrator).  Yet, sometimes an application has to be run “As Administrator” from a Standard User login.  This paper describes how to create a shortcut icon to launch a…
Detailed instructions on how to install an Access add-in in recent versions of Office and Windows (with screen shots)
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now