[gptalk] Re: starter GPOs

  • From: "Cruz, Jerome L" <jerome.l.cruz@xxxxxxxxxx>
  • To: "gptalk@xxxxxxxxxxxxx" <gptalk@xxxxxxxxxxxxx>
  • Date: Tue, 1 Jul 2008 11:29:36 -0700

Hi Darren,

Not yet... however we do plan to use them. So I'll give you a 'starter', 
starter GPO. Our Enterprise Multi-user Technology folks have a model where they 
centrally design the standard Windows Terminal Server GPOs. The actual 
consumers (the distributed GPO Admin for the terminal servers) then use that as 
a "starting point" GPO. We plan to use "Starter GPOs" for that.

Considering that many of our server images are based upon selection of a 
scripted Server Role (Base Image + Specific Server role), programmatically 
being able to add the GPO to the correct server OU location would be helpful. 
From that 'scripting' standpoint, other helpful options would be the ability to 
detect whether a starter GPO was  already linked to an OU (and therefore a new 
one would not be required) by one of several attributes (e.g. possibly full 
name or partial GPO Name lookup, possibly the option to look up a special GPO 
SYSVOL file tag-possibly a specific file added to the GPO in SYSVOL indicating 
the specific kind of GPO that exists, perhaps a full or partial text string 
look up in the comments section, etc.). Also the ability to change the default 
"Edit" permissions to that of a security group (which contains the OU level 
'group' of folks which 'should have' access-the point being to eliminate one 
additional manual configuration step).

Let's see if the info above initiates additional ideas.

Bueller here... no, I mean... Jerry Cruz here
Group Policies Product Manager | Boeing IT

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Darren Mar-Elia
Sent: Tuesday, June 24, 2008 3:31 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] starter GPOs

Hey folks-
As many of you know, I have some free PowerShell cmdlets that I provide that 
wrap the GPMC APIs. I'm looking at updating those for some of the new GPMC 
features and am trying to figure out if anyone out there is actually using 
Starter GPOs? Anyone? Bueller? Bueller? :)

Thanks,

Darren


Darren Mar-Elia
For comprehensive Windows Group Policy Information, check out 
www.gpoguy.com<http://www.gpoguy.com/>-- the best source for GPO FAQs, video 
training, tools and whitepapers. Also check out the Windows Group Policy 
Guide<http://www.amazon.com/gp/product/0735622175/qid=1122367169/sr=8-1/ref=pd_bbs_1/104-1133146-9411929?v=glance&n=283155>,
 the definitive resource for Group Policy information.



Other related posts: