New to Group Policy, need advice

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi Mike,

I think you will have to do some reading to understand.
This white paper on group policies for win2003 contains some information:
http://www.microsoft.com/downloads [...] layLang=en

Hope this helps,

Greg

"Mike" wrote:

> Folks,
>
> I have a new Windows 2003 domain with 30 users, and I need to learn how to
> use group policy's and properly create OU's, etc. I am looking for web
> sites, tutorials, etc.. for an "Introduction to group policy management" or
> something like that, so I can get a grasp on how to properly setup our
> domain. I am going to have terminal services users, as well as distinct
> separate groups (Fiscal, Management, etc). Any advice? Doing Google or MS
> searches isn't yielding me the kind of info I am looking for.
> Thanks, Mike
>

Archived from groups: microsoft.public.win2000.group_policy (More info?)

See http://members.shaw.ca/bsanders/Wi [...] yGPOs.htm. Not a
lot of stuff there, but may give you some hints. The page at
http://members.shaw.ca/bsanders/Wi [...] mation.htm
has some links, mostly to relevant Microsoft documents. Make sure you
install the Group Policy Management Console - a really essential tool for
Group Policy work!

For OU structure, I suggest something like this to start with:

domain
|_Base Container (whatever name you want to use)
| - useful because you can apply GPOs here and not
affect the containers
| that are "default" - provided by Microsoft as part
of the AD installation
|_Computers
| |_Servers
| |_Workstations
|_ Users
| |_Administrators - sometimes you want some accounts for
administrative purposes
| | that don't get GPOs that you apply to all other
users
| |_Normal Users
|_Groups - GPOs never apply to groups - its useful to keep groups
seperate from user and computer accounts
|_Computer Administration - groups you populate Local groups on
computers with (e.g. via Restricted Groups)
|_File Server Resource Groups - groups you use to apply permissions
to shares and folders on file servers
|_User Role groups - groups that have user accounts for specific
"roles"

Put user accounts into Role groups and populate your File Server Resource
groups with role groups. This concept tends to reduce administration as
your user community changes - you only need to make changes to the Role
groups.

The general concept is to organize your OUs according to how you want to
administer things, which is not necessarily related to the management
hierarchy in your organisation.

--
Bruce Sanderson MVP
http://members.shaw.ca/bsanders/
It's perfectly useless to know the right answer to the wrong question.


"Mike" <Mike@discussions.microsoft.com> wrote in message
news:AC16064B-6001-4B4C-B6B4-93D5A4B928C3@microsoft.com...
> Folks,
>
> I have a new Windows 2003 domain with 30 users, and I need to learn how to
> use group policy's and properly create OU's, etc. I am looking for web
> sites, tutorials, etc.. for an "Introduction to group policy management"
> or
> something like that, so I can get a grasp on how to properly setup our
> domain. I am going to have terminal services users, as well as distinct
> separate groups (Fiscal, Management, etc). Any advice? Doing Google or
> MS
> searches isn't yielding me the kind of info I am looking for.
> Thanks, Mike
>