Announcement

Collapse
No announcement yet.

Group Policy Management Console

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Group Policy Management Console

    I was working with a client today and introduced them to the wonder that is the "Group Policy Management Console"

    So for anyone else who just said "Group Policy what?"

    If you are using Win2K3 and administer Group Policy, install this add on, it is well worth its weight in Gold and its FREE!

    http://www.microsoft.com/windowsserv...c/default.mspx

    I won't go on about it as you can read up on it yourselves, but in short it allows you to backup, restore and copy Group Policies, Print a GP to a URL among many other things!

    This also works on XP machines with the Admin pack installed.
    If at first you dont succeed, Google it!

  • #2
    also works on a windows 2000 domain.. only you should run it from a xp machine..

    im using it myself for about 2 months or something..
    Marcel
    Technical Consultant
    Netherlands
    http://www.phetios.com
    http://blog.nessus.nl

    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
    "No matter how secure, there is always the human factor."

    "Enjoy life today, tomorrow may never come."
    "If you're going through hell, keep going. ~Winston Churchill"

    Comment


    • #3
      Couple of months ago I did quite extensive comperison between the GPO management software solutions.

      There are couple of caviats you should watch out:
      - GPMC does not backup the security and WMI filters you apply to GPO.
      - does not have any scheduling backup capability (though you can use it's API in scripts)
      - At least one of the DCs has to run W2K3
      - No ability to compare 2 GPOs
      - GPMC does not back up the links (if you restore the GPO you need to recreate the links manually)

      If any of above is not one of the things you are looking for, it's really a great tool, but I think that it's not enough for networks with distrubuted administration model.
      Guy Teverovsky
      "Smith & Wesson - the original point and click interface"

      Comment


      • #4
        - At least one of the DCs has to run W2K3
        i disagree with this one. you can use it in a native w2k server domain!

        for the rest i agree.
        working in a small organisation like me, is this a great tool to use. (150 clients)
        Marcel
        Technical Consultant
        Netherlands
        http://www.phetios.com
        http://blog.nessus.nl

        MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
        "No matter how secure, there is always the human factor."

        "Enjoy life today, tomorrow may never come."
        "If you're going through hell, keep going. ~Winston Churchill"

        Comment


        • #5
          I quote from http://download.microsoft.com/downlo...inistering.doc

          GPMC System Requirements

          GPMC helps you manage both Windows 2000 and Windows Server 2003-based domains with the Active DirectoryŽ service. In either case, the computer on which GPMC runs must be running one of the following operating systems:

          Windows Server 2003.

          Windows XP Professional with Service Pack 1 (SP1) and the Microsoft .NET Framework. In addition, a post-SP1 hotfix (QFE Q326469) is required. This QFE updates your version of gpedit.dll to version 5.1.2600.1186, which is required by GPMC. This QFE is included with GPMC, and GPMC setup will prompt you to install it. However, if the language of GPMC does not match the language of your operating system, GPMC will not install the QFE, and you will need to separately obtain and install this QFE. This QFE will be included in Windows XP Service Pack 2.
          Do not remember all the details, but I am not sure it's fully supported on pure W2K domain and you should lack some of it's functionality.
          Guy Teverovsky
          "Smith & Wesson - the original point and click interface"

          Comment


          • #6
            don't know if you miss some functionality, but i know it works..

            and:

            GPMC helps you manage both Windows 2000 and Windows Server 2003-based domains with the Active DirectoryŽ service.


            i guess it means you can manage one of those domains...
            Marcel
            Technical Consultant
            Netherlands
            http://www.phetios.com
            http://blog.nessus.nl

            MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
            "No matter how secure, there is always the human factor."

            "Enjoy life today, tomorrow may never come."
            "If you're going through hell, keep going. ~Winston Churchill"

            Comment


            • #7
              Found it... In pure W2K domain you do not get GPO Modeling.
              Guy Teverovsky
              "Smith & Wesson - the original point and click interface"

              Comment


              • #8
                never seen that option before.
                what does that option then?
                (just because im curious)
                Marcel
                Technical Consultant
                Netherlands
                http://www.phetios.com
                http://blog.nessus.nl

                MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                "No matter how secure, there is always the human factor."

                "Enjoy life today, tomorrow may never come."
                "If you're going through hell, keep going. ~Winston Churchill"

                Comment


                • #9
                  GPO Modeling is simply a "what if" scenario, what if a user names XXX logs on to computer YYY - what will his effective GPO settings be. Also, it allows you to test scenarios in which a user or his computer (or both) are moved from one OU to another.
                  Cheers,

                  Daniel Petri
                  Microsoft Most Valuable Professional - Active Directory Directory Services
                  MCSA/E, MCTS, MCITP, MCT

                  Comment


                  • #10
                    nice feature...
                    to bad i miss that function. thnx for the info...
                    Marcel
                    Technical Consultant
                    Netherlands
                    http://www.phetios.com
                    http://blog.nessus.nl

                    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                    "No matter how secure, there is always the human factor."

                    "Enjoy life today, tomorrow may never come."
                    "If you're going through hell, keep going. ~Winston Churchill"

                    Comment

                    Working...
                    X