Group Policy Templates

Transcription

1 Group Policy Templates Release Notes Prepared by Microsoft First published 22 March 2007

2 Copyright This document and/or software ( this Content ) has been created in partnership with the National Health Service (NHS) in England. Intellectual Property Rights to this Content are jointly owned by Microsoft and the NHS in England, although both Microsoft and the NHS are entitled to independently exercise their rights of ownership. Microsoft acknowledges the contribution of the NHS in England through their Common User Interface programme to this Content. Readers are referred to for further information on the NHS CUI Programme. All trademarks are the property of their respective companies. Microsoft and Windows are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Microsoft Corporation and Crown Copyright 2007 Disclaimer At the time of writing this document, Web sites are referenced using active hyperlinks to the correct Web page. Due to the dynamic nature of Web sites, in time, these links may become invalid. Microsoft is not responsible for the content of external Internet sites. The example companies, organisations, products, domain names, addresses, logos, people, places, and events depicted herein are fictitious. No association with any real company, organisation, product, domain name, address, logo, person, places, or events is intended or should be inferred. Page ii

3 INTRODUCTION This document contains Release Notes for the Group Policy Templates. The Group Policy Templates should be used in conjunction with the guidance contained in Group Policy for Healthcare Desktop Management. Important All information in this document refers to Group Policy Templates build number produced by Microsoft on 13-Oct Deliverables This Deliverable comprises: A compressed (.zip) file Healthcare Desktop GPO Templates.zip containing: Prerequisites 13 folders, each containing a Group Policy Template A manifest.xml file, used by the Group Policy backup/import wizard An installer for Group Policy ADM files, admfiles_windowsxpsp2.msi, which has been used as an example in the Software Installs template. This is not essential for deploying this Deliverable The minimum hardware and software requirements for using the Group Policy Templates are: Either, Windows Server 2003 Or, Windows 2000 Server with access to a Windows XP SP2 workstation for the use of the Group Policy Management Console Installation To install the Group Policy Templates: 1. Right-click the Healthcare Desktop GPO Templates.zip file and select Extract All. 2. The Extraction Wizard Welcome screen will display, click Next. 3. The Select a Destination screen will be displayed, in the Files will be extracted to this directory: field, type the name of the folder you want to extract the files to, and click Next. (This location should be accessible from where the import operation will be carried out). 4. The files will be extracted and the Extraction Complete screen will display, click Finish 5. The Group Policy Templates can now be imported using the Import Settings Wizard within the Group Policy Management Console. Name each GPO being imported appropriately, using Table 1 as an example. For details on how to import a GPO, please refer to Appendix B - How To Guides in the document Group Policy for Healthcare Desktop Management. Backup Name Baseline Computer Recommended Settings Baseline User Recommended Settings Imported Name Baseline Computer Baseline User GPO BB Blocking Internet Explorer 7 Incremental Computer Blocking Internet Explorer 7 Page 1

4 Backup Name GPO BB GPO Administration GPO BB Internet Explorer GPO BB Look and Feel GPO BB Redirected Folders GPO BB Security Hardening GPO BB Software Installs GPO BB Software Restriction GPO BB WSUS Incremental Computer Public Cybercafe PC Incremental User Public Cybercafe PC Imported Name Incremental GPO Administration Incremental User Internet Explorer Incremental User Look and Feel Incremental User Redirected Folders Incremental Computer Security Hardening Incremental Computer Software Installs Incremental Computer Software Restriction Incremental Computer WSUS Incremental Computer Public Cybercafe PC Incremental User Public Cybercafe PC Table 1: Example Naming Convention for GPOs 6. Whilst importing the Group Policy Templates, the GPOs containing a reference to a UNC path or security principal may require a migration table. a. At the Migrating References screen during the Import Settings Wizard, select Using this migration table to map them in the destination GPO: option. b. Click New. c. The Migration Table Editor will display, click Tools > Populate from Backup. d. The Select Backup window will display, select the GPO that you are importing from the Backed up GPOs: list box and click OK. e. The Migration Table Editor will display, populated with entries requiring migration. Amend the Destination Name appropriately. f. Click File > Save As, enter a path and filename for the migration table, and click Save. g. Close the Migration Table Editor to be returned to the Import Settings Wizard screen. 7. Once each GPO has been imported, the GPO can be linked to an appropriate Organisational Unit. For details on how to link an existing GPO, please refer to Appendix B - How To Guides in the document Group Policy for Healthcare Desktop Management. Uninstallation To uninstall the Group Policy Templates: 1. Using Windows Explorer, locate the folder used to extract the Group Policy for Healthcare Desktop Management Templates.zip file to. Right-click this folder and click Delete. 2. If prompted with a Confirm Folder Delete dialog box, click Yes. 3. To delete the Group Policy Objects imported into the Group Policy Management Console, open the GPMC located, by default on a Windows Server 2003 server, in Start > All Programs > Administrative Tools. 4. Click the Group Policy Objects container in the left hand pane of the GPMC, all GPOs will be displayed in the right hand pane. 5. Select the GPOs to be deleted, (multiple GPOs can be selected at once by using the Ctrl key whilst clicking the GPOs), and press the Delete key. Page 2

5 6. A Group Policy Management dialog box will be displayed asking for you to confirm that you wish to delete the selected GPOs and all links to them, click OK. 7. A Delete dialog box displaying the Delete Progress and Status will be displayed, click OK once complete. Page 3

6 KNOWN ISSUES Title and Description Some group policies can require two logons to be fully applied Some group policy templates are not fully implemented until the user logs on for a second time, such as the software install building block and the cyber cafe user template. This issue is documented in Group Policy for Healthcare Desktop Management. Severity Ref Major 2095 Page 4