Managing Group Policy in a Windows Server 2003 Environment

We plan to introduce Windows 7 desktops in our existing 2003 Environment.
Currently we are using Folder Redirection, Roaming Profiles,
Logon/Logoff/Startup/shutdown scripts etc. I would like to know if the
current settings will be applicable to Windows 7?

Generally what are the guidelines to introduce windows 7 in a windows 2003
environment?

Regards

Carl,

Carl schrieb:
> We plan to introduce Windows 7 desktops in our existing 2003 Environment.
> Currently we are using Folder Redirection, Roaming Profiles,
> Logon/Logoff/Startup/shutdown scripts etc. I would like to know if the
> current settings will be applicable to Windows 7?

A general recommendation is using a patched and up-to-date management
computer with GPMC installed, to manage Group Policy. In your case, that
would be a Win7 machine with RSAT downloaded and installed on it.

Scripting shouldn't be an issue - Folder Redirection and Roaming
Profiles I would check thoroughly as there have been changes to the
profile subsystem in Win Vista and Win7. You probably want to seperate
the Win7 clients into their own OU and configure and appropriate second
Folder Redirection GPO for these machines.

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
ANY advice you get on the Newsgroups should be tested thoroughly in your
lab.

Hello carl,

Basically the settings are the same, with Windows 7 and Vista the profile
version changed:
http://download.microsoft.com/downlo...nt%20Guide.doc

So for the new OS with the profile version2 create there own OU and configure
there own set of policies, especially for folder redirection.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> We plan to introduce Windows 7 desktops in our existing 2003
> Environment. Currently we are using Folder Redirection, Roaming
> Profiles, Logon/Logoff/Startup/shutdown scripts etc. I would like to
> know if the current settings will be applicable to Windows 7?
>
> Generally what are the guidelines to introduce windows 7 in a windows
> 2003 environment?
>
> Regards
>

Thanks Florian for your response.

Is there a difference in using GPMC on a Windows XP or Windows 2003 server
and RSAT in a Windows 7 system to manage group policies for windows 7?

Our major challenge is Roaming Profiles, how do we mitigate this issue,
especially because our uses shuffle between win7 and winxp, can you suggest
how we can handle this situation?

"Florian Frommherz [MVP]" <florian@frickelsoft.DELETETHIS.net> wrote in
message news:uCiQC0JeKHA.5568@TK2MSFTNGP02.phx.gbl...
> Carl,
>
> Carl schrieb:
>> We plan to introduce Windows 7 desktops in our existing 2003 Environment.
>> Currently we are using Folder Redirection, Roaming Profiles,
>> Logon/Logoff/Startup/shutdown scripts etc. I would like to know if the
>> current settings will be applicable to Windows 7?
>
> A general recommendation is using a patched and up-to-date management
> computer with GPMC installed, to manage Group Policy. In your case, that
> would be a Win7 machine with RSAT downloaded and installed on it.
>
> Scripting shouldn't be an issue - Folder Redirection and Roaming Profiles
> I would check thoroughly as there have been changes to the profile
> subsystem in Win Vista and Win7. You probably want to seperate the Win7
> clients into their own OU and configure and appropriate second Folder
> Redirection GPO for these machines.
>
> Cheers,
> Florian
> --
> Microsoft MVP - Group Policy
> eMail: prename [at] frickelsoft [dot] net.
> blog: http://www.frickelsoft.net/blog.
> ANY advice you get on the Newsgroups should be tested thoroughly in your
> lab.

Hello carl,

Use a Windows 7 machine so you can be sure to have all current GPO settings
for Windows 7 available. When you configure a new GPO the local administrative
templates are choosen.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Thanks Florian for your response.
>
> Is there a difference in using GPMC on a Windows XP or Windows 2003
> server and RSAT in a Windows 7 system to manage group policies for
> windows 7?
>
> Our major challenge is Roaming Profiles, how do we mitigate this
> issue, especially because our uses shuffle between win7 and winxp, can
> you suggest how we can handle this situation?
>
> "Florian Frommherz [MVP]" <florian@frickelsoft.DELETETHIS.net> wrote
> in message news:uCiQC0JeKHA.5568@TK2MSFTNGP02.phx.gbl...
>
>> Carl,
>>
>> Carl schrieb:
>>
>>> We plan to introduce Windows 7 desktops in our existing 2003
>>> Environment. Currently we are using Folder Redirection, Roaming
>>> Profiles, Logon/Logoff/Startup/shutdown scripts etc. I would like to
>>> know if the current settings will be applicable to Windows 7?
>>>
>> A general recommendation is using a patched and up-to-date management
>> computer with GPMC installed, to manage Group Policy. In your case,
>> that would be a Win7 machine with RSAT downloaded and installed on
>> it.
>>
>> Scripting shouldn't be an issue - Folder Redirection and Roaming
>> Profiles I would check thoroughly as there have been changes to the
>> profile subsystem in Win Vista and Win7. You probably want to
>> seperate the Win7 clients into their own OU and configure and
>> appropriate second Folder Redirection GPO for these machines.
>>
>> Cheers,
>> Florian
>> --
>> Microsoft MVP - Group Policy
>> eMail: prename [at] frickelsoft [dot] net.
>> blog: http://www.frickelsoft.net/blog.
>> ANY advice you get on the Newsgroups should be tested thoroughly in
>> your
>> lab.

Howdie!

Carl schrieb:
> Is there a difference in using GPMC on a Windows XP or Windows 2003 server
> and RSAT in a Windows 7 system to manage group policies for windows 7?

Yeah - it's the features you can select. In RSAT for Win7, you can
configure new settings made for Win7 (AppLocker and the like). GPMC in
XP doesn't let you do that.

> Our major challenge is Roaming Profiles, how do we mitigate this issue,
> especially because our uses shuffle between win7 and winxp, can you suggest
> how we can handle this situation?

Hmm... there'll be issues. With Windows Vista, Microsoft changed the
profile structure so profiles created on Win Vista and profiles created
on Win7 aren't compatible. You'll basically have two different profiles
that are, depending on what machine the user logs on, get loaded.

That doesn't have to be a bad thing - you just need to organize data and
configuration of the profiles correctly.

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
ANY advice you get on the Newsgroups should be tested thoroughly in your
lab.

Thanks Florian!!

What in specific do you mean organize data and configuration of the profiles
correctly??


"Florian Frommherz [MVP]" <florian@frickelsoft.DELETETHIS.net> wrote in
message news:OlICrvWeKHA.6096@TK2MSFTNGP02.phx.gbl...
> Howdie!
>
> Carl schrieb:
>> Is there a difference in using GPMC on a Windows XP or Windows 2003
>> server and RSAT in a Windows 7 system to manage group policies for
>> windows 7?
>
> Yeah - it's the features you can select. In RSAT for Win7, you can
> configure new settings made for Win7 (AppLocker and the like). GPMC in XP
> doesn't let you do that.
>
>> Our major challenge is Roaming Profiles, how do we mitigate this issue,
>> especially because our uses shuffle between win7 and winxp, can you
>> suggest how we can handle this situation?
>
> Hmm... there'll be issues. With Windows Vista, Microsoft changed the
> profile structure so profiles created on Win Vista and profiles created on
> Win7 aren't compatible. You'll basically have two different profiles that
> are, depending on what machine the user logs on, get loaded.
>
> That doesn't have to be a bad thing - you just need to organize data and
> configuration of the profiles correctly.
>
> Cheers,
> Florian
> --
> Microsoft MVP - Group Policy
> eMail: prename [at] frickelsoft [dot] net.
> blog: http://www.frickelsoft.net/blog.
> ANY advice you get on the Newsgroups should be tested thoroughly in your
> lab.

Hello carl,

You can use the guide from my other posting about setting up profiles for
Windows Vista.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Thanks Florian!!
>
> What in specific do you mean organize data and configuration of the
> profiles correctly??
>
> "Florian Frommherz [MVP]" <florian@frickelsoft.DELETETHIS.net> wrote
> in message news:OlICrvWeKHA.6096@TK2MSFTNGP02.phx.gbl...
>
>> Howdie!
>>
>> Carl schrieb:
>>
>>> Is there a difference in using GPMC on a Windows XP or Windows 2003
>>> server and RSAT in a Windows 7 system to manage group policies for
>>> windows 7?
>>>
>> Yeah - it's the features you can select. In RSAT for Win7, you can
>> configure new settings made for Win7 (AppLocker and the like). GPMC
>> in XP doesn't let you do that.
>>
>>> Our major challenge is Roaming Profiles, how do we mitigate this
>>> issue, especially because our uses shuffle between win7 and winxp,
>>> can you suggest how we can handle this situation?
>>>
>> Hmm... there'll be issues. With Windows Vista, Microsoft changed the
>> profile structure so profiles created on Win Vista and profiles
>> created on Win7 aren't compatible. You'll basically have two
>> different profiles that are, depending on what machine the user logs
>> on, get loaded.
>>
>> That doesn't have to be a bad thing - you just need to organize data
>> and configuration of the profiles correctly.
>>
>> Cheers,
>> Florian
>> --
>> Microsoft MVP - Group Policy
>> eMail: prename [at] frickelsoft [dot] net.
>> blog: http://www.frickelsoft.net/blog.
>> ANY advice you get on the Newsgroups should be tested thoroughly in
>> your
>> lab.

Howdie!

Carl wrote:
> What in specific do you mean organize data and configuration of the profiles
> correctly??

If you have scripting/backups involved, you'll need to make sure you
have both profiles in there (the Vista+ profile is suffixed with a .V2
extension and named just like the "old" profile) and change scripts.
Also, if there's a profile quota on the volume (or a GP setting
restricting it), you might want to evaluate that again, too.

Cheers,
Florian

So, inorder to take the benefit of windows 7 group policies in a Windows
2003 Domain, i can manage GP using a Windows 7 workstation with RSAT
installed?


"Florian Frommherz [MVP]" <florian@frickelsoft.DELETETHIS.net> wrote in
message news:OlICrvWeKHA.6096@TK2MSFTNGP02.phx.gbl...
> Howdie!
>
> Carl schrieb:
>> Is there a difference in using GPMC on a Windows XP or Windows 2003
>> server and RSAT in a Windows 7 system to manage group policies for
>> windows 7?
>
> Yeah - it's the features you can select. In RSAT for Win7, you can
> configure new settings made for Win7 (AppLocker and the like). GPMC in XP
> doesn't let you do that.
>
>> Our major challenge is Roaming Profiles, how do we mitigate this issue,
>> especially because our uses shuffle between win7 and winxp, can you
>> suggest how we can handle this situation?
>
> Hmm... there'll be issues. With Windows Vista, Microsoft changed the
> profile structure so profiles created on Win Vista and profiles created on
> Win7 aren't compatible. You'll basically have two different profiles that
> are, depending on what machine the user logs on, get loaded.
>
> That doesn't have to be a bad thing - you just need to organize data and
> configuration of the profiles correctly.
>
> Cheers,
> Florian
> --
> Microsoft MVP - Group Policy
> eMail: prename [at] frickelsoft [dot] net.
> blog: http://www.frickelsoft.net/blog.
> ANY advice you get on the Newsgroups should be tested thoroughly in your
> lab.

Florian,

Firstly, you are right there is another new user profile folder
(username.V2) that gets created in case of roaming profiles, however is
there a way to mititage this issues? USMT??

Secondly, Assuming that i introduce a windows 7 workstation as an
administrative workstation, and modify the group policy settings that are
applicable to windows XP machines will there be any issues??

"Florian Frommherz [MVP]" <florian@frickelsoft.net> wrote in message
news:eGzMkuXeKHA.5136@TK2MSFTNGP02.phx.gbl...
> Howdie!
>
> Carl wrote:
>> What in specific do you mean organize data and configuration of the
>> profiles correctly??
>
> If you have scripting/backups involved, you'll need to make sure you have
> both profiles in there (the Vista+ profile is suffixed with a .V2
> extension and named just like the "old" profile) and change scripts. Also,
> if there's a profile quota on the volume (or a GP setting restricting it),
> you might want to evaluate that again, too.
>
> Cheers,
> Florian

Carl schrieb:
> So, inorder to take the benefit of windows 7 group policies in a Windows
> 2003 Domain, i can manage GP using a Windows 7 workstation with RSAT
> installed?

Yes, you can.

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
ANY advice you get on the Newsgroups should be tested thoroughly in your
lab.

Carl,

Carl schrieb:
> Firstly, you are right there is another new user profile folder
> (username.V2) that gets created in case of roaming profiles, however is
> there a way to mititage this issues? USMT??

No, 'cause the two profiles are non-compatible to each other. You won't
get XP to load the .V2 profile. Vista/7 won't load the legacy profile
either.

> Secondly, Assuming that i introduce a windows 7 workstation as an
> administrative workstation, and modify the group policy settings that are
> applicable to windows XP machines will there be any issues??

There shouldn't. You should be doing just fine. In the end, what comes
down to the clients when working with Administrative Templates is a file
called Registry.POL that contains all the registry modifications
settings made in "Administrative Templates". For other settings or new
features, specific Client Side Extensions (CSEs) are called on the
target clients to perform the "magic" and enforce settings you
configure. Settings legacy clients don't know/can't interprete will just
be ignored.

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
ANY advice you get on the Newsgroups should be tested thoroughly in your
lab.