Bad for whom? Down here where the bar is low for best practices in the first place.... the var/vap comes in and has to kick the owner off of his shiny new OEM Vista box and borrow it to set up the group policy firewall settings for it, or other settings that the managed services partner may want to do.

When I'm doing group policy stuff... I'm up on that GPMC that is automagically installed on that SBS box and I'm in a group policy frame of mind.

I could manage GPOs from my desktop but I just don't... I RDP into the server.

What you guys should think of is burning in a VCD (virtual) Vista image that is pre-staged to be nothing but a Group policy management tool? (stupid idea?)



Laura A. Robinson wrote:
So Microsoft should encourage their bad practices?
Laura

    ------------------------------------------------------------------------
    *From:* [EMAIL PROTECTED]
    [mailto:[EMAIL PROTECTED] *On Behalf Of
    *Akomolafe, Deji
    *Sent:* Friday, December 15, 2006 12:39 PM
    *To:* ActiveDir@mail.activedir.org
    *Subject:* RE: [ActiveDir] Vista GPO

    >>> People don't seem to have a problem with that concept when it
    comes to game consoles :)
Bad analogy. Go stand in the corner, no wii for you :) When people start running their businesses on game consoles, then
    you can come back and compare. For now, it's just plain
    incomprehensible that you can't manage ADMX from anything but
    Vista. Yeah, ideally we would want to encourage clients to NOT
    manage things directly from servers, and to ensure that IF they
    are going to introduce Vista, the IT folks' machines should be
    doing the dog-fooding, but realistically, the "ideal" is always
    the exception in this field. Microsoft should know that. People
    will insist on managing GPO directly from the DCs, best practices
    be damned.

    Sincerely,
_____ (, / | /) /) /) /---| (/_ ______ ___// _ // _
     ) /    |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /) (/ Microsoft MVP - Directory Services
    www.akomolafe.com
    <x-excid://32770000/uri:http://www.akomolafe.com> - we know IT
    *-5.75, -3.23*
    Do you now realize that Today is the Tomorrow you were worried
    about Yesterday? -anon

    ------------------------------------------------------------------------
    *From:* Darren Mar-Elia
    *Sent:* Fri 12/15/2006 9:18 AM
    *To:* ActiveDir@mail.activedir.org
    *Subject:* RE: [ActiveDir] Vista GPO

    I hear you Rich. I had a long discussion with someone on the GP newsgroups
    who thought that the fact that XP and 2003 couldn't read Vista GP settings
    was an abomination and a scandal of the highest order and that MS should be
    beaten for their insolence (I'm paraphrasing :-)). But, yes, we should all
    be used to the fact that sometimes, you have to adopt the new stuff to get
    the new toys. People don't seem to have a problem with that concept when it
    comes to game consoles :)

    Darren

    -----Original Message-----
    From: [EMAIL PROTECTED]
    [mailto:[EMAIL PROTECTED] On Behalf Of Rich Milburn
    Sent: Friday, December 15, 2006 9:04 AM
    To: ActiveDir@mail.activedir.org
    Subject: RE: [ActiveDir] Vista GPO

    Sorry, I understand it's different, what I meant was merely that we had
    some growing pains like this when XP first came out.  Our practice then
    became to use only XP desktops for GP management.  I think there's a
    tendency to think this is such a terrible thing, this
    backwards-incompatibility, and we might forget that Vista is not new
    with this, we had similar issues before.  And who remembers the
    teeth-pulling to get people to move to Active Directory??

    -----------------------------------------------------------------------
    Rich Milburn
    MCSE, Microsoft MVP - Directory Services
    Sr Network Analyst, Field Platform Development
    Applebee's International, Inc.
    4551 W. 107th St
    Overland Park, KS 66207
    913-967-2819
    ----------------------------------------------------------------------
    "I love the smell of red herrings in the morning" - anonymous


    -----Original Message-----
    From: [EMAIL PROTECTED]
    [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia
    Sent: Friday, December 15, 2006 10:05 AM
    To: ActiveDir@mail.activedir.org
    Subject: RE: [ActiveDir] Vista GPO

    This is actually a little different because if you view a GPO that was
    created with Vista, using XP or 2003, none of the ADMX settings can
    actually
    be read at all, because they are a completely new format that GPEditor
    or
    GPMC on those older platforms don't understand. In fact, those XP or
    2003
    will happily copy up the ADMs into the Vista GPO like they used to do,
    and
    you're back to each GPO storing ADMs in SYSVOL. What I've been
    recommending
    to folks is that once you introduce Vista desktops into your
    environment,
    use Vista for all your ongoing GP management. The Vista ADMXs are a
    superset
    of the latest and greatest ADMs (i.e. they include 2003, XP and Vista
    settings) so you can happily manage Vista and non-Vista targeted GP
    settings
    from a Vista machine.

    Darren

    Darren Mar-Elia
    CTO & Founder
    www.sdmsoftware.com
    [EMAIL PROTECTED]



    -----Original Message-----
    From: [EMAIL PROTECTED]
    [mailto:[EMAIL PROTECTED] On Behalf Of Rich Milburn
    Sent: Friday, December 15, 2006 6:49 AM
    To: ActiveDir@mail.activedir.org
    Subject: RE: [ActiveDir] Vista GPO

    You may recall, there was a similar case when XP came out too - if
    memory serves, you had to manage XP GPO settings from an XP box - if you
    opened them on Win2K, there were problems (I can't recall now exactly
    what those problems were... it would corrupt the policy? Lose the
    settings?) anyway so there are tons more settings (+ side) and you have
    to use Vista for now (- side, sorta).  I wouldn't be too surprised if
    they fix that with the next server and XP SP... but I haven't actually
    heard that.

    -----------------------------------------------------------------------
    Rich Milburn
    MCSE, Microsoft MVP - Directory Services
    Sr Network Analyst, Field Platform Development
    Applebee's International, Inc.
    4551 W. 107th St
    Overland Park, KS 66207
    913-967-2819
    ----------------------------------------------------------------------
    "I love the smell of red herrings in the morning" - anonymous


    -----Original Message-----
    From: [EMAIL PROTECTED]
    [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia
    Sent: Thursday, December 14, 2006 4:13 PM
    To: ActiveDir@mail.activedir.org
    Subject: RE: [ActiveDir] Vista GPO

    Vista introduces a new Admin Template format called ADMX. These are
    found on Vista in C:\windows\policydefinitions and, unfortuately cannot
    be consumed by earlier versions of Windows. That is you must manage
    Vista GP from Vista.

    Darren

    -----Original Message-----
    From: "Za Vue" <[EMAIL PROTECTED]>
    To: ActiveDir@mail.activedir.org
    Sent: 12/14/2006 1:18 PM
    Subject: Re: [ActiveDir] Vista GPO

    Sorry. Exactly what Ben wrote.

    Thanks..

    -Z.V.

    WATSON, BEN wrote:
    > Maybe he may be referring to the location of any possible new ADM
    files
    > included with Vista.
    >
    > -----Original Message-----
    > From: [EMAIL PROTECTED]
    > [mailto:[EMAIL PROTECTED] On Behalf Of Darren
    Mar-Elia
    > Sent: Thursday, December 14, 2006 10:34 AM
    > To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] Vista GPO >
    > What do you mean Za? I'm not familiar with any GPO plug-in for Win2K3,
    > unless you mean the LDIF files that are in sources\adprep on the Vista
    > CD?
    >
    > -----Original Message-----
    > From: [EMAIL PROTECTED]
    > [mailto:[EMAIL PROTECTED] On Behalf Of Za Vue
    > Sent: Thursday, December 14, 2006 9:57 AM
    > To: ActiveDir@mail.activedir.org
> Subject: [ActiveDir] Vista GPO >
    > Anyone know what and where the GPO plugin for Win2003 on the Vista DVD

    > is called and located?
    >
    > -Z.V.
    > List info   : http://www.activedir.org/List.aspx
    > List FAQ    : http://www.activedir.org/ListFAQ.aspx
    > List archive:
    http://www.mail-archive.com/activedir@mail.activedir.org/
    >
    > List info   : http://www.activedir.org/List.aspx
    > List FAQ    : http://www.activedir.org/ListFAQ.aspx
    > List archive:
    http://www.mail-archive.com/activedir@mail.activedir.org/
    > List info   : http://www.activedir.org/List.aspx
    > List FAQ    : http://www.activedir.org/ListFAQ.aspx
    > List archive:
    http://www.mail-archive.com/activedir@mail.activedir.org/
    >
    >
> List info : http://www.activedir.org/List.aspx
    List FAQ    : http://www.activedir.org/ListFAQ.aspx
    List archive: http://www.mail-archive.com/activedir@mail.activedir.org/

    List info   : http://www.activedir.org/List.aspx
    List FAQ    : http://www.activedir.org/ListFAQ.aspx
    List archive: http://www.mail-archive.com/activedir@mail.activedir.org/

    -------APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE-------
PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or any attachments. This information is strictly confidential and may be subject to attorney-client privilege. This message is intended only for the use of the named
    addressee.
If you are not the intended recipient of this message, unauthorized
    forwarding,

printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, you should kindly notify the sender by reply e-mail and immediately destroy this message. Unauthorized interception of this e-mail is a violation of federal
    criminal
law. Applebee's International, Inc. reserves the right to monitor and review the content of all messages sent to and from this e-mail address. Messages
    sent
to or from this e-mail address may be stored on the Applebee's
    International,
Inc. e-mail system.
    List info   : http://www.activedir.org/List.aspx
    List FAQ    : http://www.activedir.org/ListFAQ.aspx
    List archive: http://www.mail-archive.com/activedir@mail.activedir.org/

    List info   : http://www.activedir.org/List.aspx
    List FAQ    : http://www.activedir.org/ListFAQ.aspx
    List archive: http://www.mail-archive.com/activedir@mail.activedir.org/

    -------APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE-------
PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or any attachments. This information is strictly confidential and may be subject to attorney-client privilege. This message is intended only for the use of the named addressee. If you are not the intended recipient of this message, unauthorized forwarding,

printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, you should kindly notify the sender by reply e-mail and immediately destroy this message. Unauthorized interception of this e-mail is a violation of federal criminal law. Applebee's International, Inc. reserves the right to monitor and review the content of all messages sent to and from this e-mail address. Messages sent to or from this e-mail address may be stored on the Applebee's International, Inc. e-mail system.
    List info   : http://www.activedir.org/List.aspx
    List FAQ    : http://www.activedir.org/ListFAQ.aspx
    List archive: http://www.mail-archive.com/activedir@mail.activedir.org/

    List info   : http://www.activedir.org/List.aspx
    List FAQ    : http://www.activedir.org/ListFAQ.aspx
    List archive: http://www.mail-archive.com/activedir@mail.activedir.org/

    --
    No virus found in this incoming message.
    Checked by AVG Free Edition.
    Version: 7.5.432 / Virus Database: 268.15.20/588 - Release Date:
    12/15/2006 10:02 AM


--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.5.432 / Virus Database: 268.15.20/588 - Release Date: 12/15/2006 10:02 AM


--
Letting your vendors set your risk analysis these days? http://www.threatcode.com

If you are a SBSer and you don't subscribe to the SBS Blog... man ... I will 
hunt you down...
http://blogs.technet.com/sbs

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/

Reply via email to