Jump to content
LCVG

MCSE gurus please read


merlot

Recommended Posts

It's been about 2 years since I took my MCSE courses, and I'm finally getting a domain server running at work. I'm still in the early testing stages and have a question about Group Policy.

 

I looked high and low for MS's recommendations, but could find none. Is it recommened to change the Default Domain Policy or use your own? Further more, if I just wanted to redirect My Documents, would creating a seperate policy be overkill (disabling the computer configuration part to speed things up).

 

In reading my MCSE books, I'm under the impression that creating new policys and using descriptive names to help indentify what it does is encouraged, but so is not using to many policys.

 

TIA!

Link to comment
Share on other sites

I looked high and low for MS's recommendations, but could find none. Is it recommened to change the Default Domain Policy or use your own?

 

I highly recommend taking the time to sit down and think about your policy, such as who has access where, if you are using DFS, access is very important. The default policy is more or less leaving things wide open for everyone's ease of use. And to tell you the truth, you could probably leave it alone, but if you have any sort of security policy at work, you better right your own.

 

Further more, if I just wanted to redirect My Documents, would creating a seperate policy be overkill (disabling the computer configuration part to speed things up).

 

A policy for My Document relocation is most certainly overkill. When setting up a group policy try to always keep security in mind and you'll move through it alot faster :wink:

 

In reading my MCSE books, I'm under the impression that creating new policys and using descriptive names to help indentify what it does is encouraged, but so is not using to many policys.

 

Sounds like a good book ;)

Link to comment
Share on other sites

Thanks Scott...

 

I decided to disable the Default Domain Policy, and create one Policy at the domain level that will be applied for everyone (security, folder redirection, and assigned offiline files). Any other policy's I need for specific groups I'll apply to OU's.

 

The nice thing about setting this up is I have no timeline, and can screw around with it for as long as I want (I won't mention how long this $10K server was used as nothing more than a foot rest in my office :wink: )

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...