Ideas For New GPO's
-
It's great that you're getting new equipment and Server 2012, I hope you'll be virtualizing these.
System Lockout after inactivity
Permission Groups -
Drive mapping by GPO rather than Script.
-
@gjacobse damn you beat me to it lol.
Was typing that up.
-
Server 2012 R2, I hope, on a new install. 2012 is not current, 2016 is just months away.
-
@scottalanmiller Yes, 2012 R2
-
@alex.olynyk said:
@scottalanmiller Yes, 2012 R2
Assuming you can't wait, this is a situation where I would buy Software Assurance so you have rights to 2016 when it comes out. Same goes for your CALs.
-
-
@gjacobse said:
Drive mapping by GPO rather than Script.
That's one of the first things I am going to do when we upgrade from 2003 to 2016.
And printers.
-
@alex.olynyk said:
We will soon be purchasing some Dell servers with Server 2012 and I will need to setup some group policies once we bring all centers under 1 domain.
I plan to create a policy to enable PS Remoting across the domain. What are some other GPO's I should consider creating?
Use Group Policy Prefernces wherever you can. Item level targeting makes mapping different drives to different users incredibly easy. One GPO to rule them all! Use these for desktop shortcuts too.
I am also using GPO's to set IE compatibility view and trusted sites etc. Windows updates especially with multiple locations. you can use GPO's to configure BITS throttling to save bandwidth during the day or schedule WSUS etc.
-
@alex.olynyk said:
What are some other GPO's I should consider creating?
This is such a backwards way of thinking about it. You Create Group Policies to make management and security better and meet business needs. People that like to sit around and drum up new ideas for GPOs should not be able to touch Group Policy.
-
Manage Updates for different groups of users...
We have clients that have critical times of the year, or have critical staff / software. While updates are important,.. and required. Some updates have been known to break software.
