| Author | Messages | |
acjuelich
Posts:147
 | | 02/02/2012 9:31 PM |
| Hello Everyone,
Right now we mostly have XP machines with about a hundred Windows 7
machines. By the end of this summer we hope to have that statistic
reversed. Now, when you have different OS's in a single domain environment
what have you found to be the best way to do this? I see a few different
ways of doing it.
1. Utilize WMI Filters. I have heard that this can impact performance
greatly so I'm cautious about it. When it comes to Group Policy
Preferences, I am already utilizing the Item-Level Filtering for stuff like
this.
2. Have separate OU's for Operating Systems, with blocked inheritance
and assign directly the needed policies.
3. Have conjoined policies since they will filter out automatically
based on which OS's they support (For example, UAC settings)
*-----------------------------------------------*
*Adam Juelich*
MCSA, MCSE, MCTS: Vista, A+, Network+
Pulaski Community School District <http://www.pulaski.k12.wi.us>
920-822-6075
*"Reason is not automatic. Those who deny it cannot be conquered by it. Do
not count on them. Leave them alone." *
-- *Ayn Rand*
| | | |
| dougdelaney
Posts:43
| | 02/02/2012 11:40 PM |
| We went with separate GPOs in the same Domain/OUs, with a WMI filter to apply the GPOs. We did that both for a policy GPO and a Preferences GPO. So, XP only receives the 2 GPOs (Pre-W7-Computers WMI filter), and Windows 7 only receives the two GPOs (W7-Computers WMI filter). The GPOs have Authenticated Users as the apply and read permissions on all of the GPOs. In our Preferences GPOs, we utilize Item Level Targeting very sparingly (none of which use WMI) only as absolutely needed. We have not negatively impacted performance.
Notes:
- Our ILT filters currently only utilize registry keys, and in one case a security group.
- Some policy settings may actually apply to OSes they are not supposed to be supported on.
Doug Delaney
Technology Consultant
Americas Regional Delivery Engineering
HP Enterprise Services
Telephone +1 248.285.3665
lab phone +1 248.285.3719
Mobile +1 248.210.4973
Email Doug.Delaney@hp.com<mailto oug.Delaney@hp.com>
985 W. Entrance Dr., 2A / Auburn Hills, MI 48326
[cid:image002.jpg@01CCE1D0.04120A00]
From: gptalk-owner@lists.gpoguy.com [mailto:gptalk-owner@lists.gpoguy.com] On Behalf Of Juelich, Adam
Sent: Thursday, February 02, 2012 3:25 PM
To: gptalk@lists.gpoguy.com
Subject: [gptalk] Group Policy in Multi-OS Domain
Hello Everyone,
Right now we mostly have XP machines with about a hundred Windows 7 machines. By the end of this summer we hope to have that statistic reversed. Now, when you have different OS's in a single domain environment what have you found to be the best way to do this? I see a few different ways of doing it.
1. Utilize WMI Filters. I have heard that this can impact performance greatly so I'm cautious about it. When it comes to Group Policy Preferences, I am already utilizing the Item-Level Filtering for stuff like this.
2. Have separate OU's for Operating Systems, with blocked inheritance and assign directly the needed policies.
3. Have conjoined policies since they will filter out automatically based on which OS's they support (For example, UAC settings)
-----------------------------------------------
Adam Juelich
MCSA, MCSE, MCTS: Vista, A+, Network+
Pulaski Community School District<http://www.pulaski.k12.wi.us>
920-822-6075
"Reason is not automatic. Those who deny it cannot be conquered by it. Do not count on them. Leave them alone."
― Ayn Rand
| | | |
| DarraghOShaughnessy
Posts:177
| | 02/03/2012 10:33 AM |
| I would have to say cautiously, WMI filters . depending on the filter J
Certain queries return large result sets so it really depends on the query.
I'm quite found of ITL though and find it works very well.
From: gptalk-owner@lists.gpoguy.com [mailto:gptalk-owner@lists.gpoguy.com]
On Behalf Of Delaney, Doug
Sent: 02 February 2012 22:28
To: gptalk@lists.gpoguy.com
Subject: RE: [gptalk] Group Policy in Multi-OS Domain
We went with separate GPOs in the same Domain/OUs, with a WMI filter to
apply the GPOs. We did that both for a policy GPO and a Preferences GPO.
So, XP only receives the 2 GPOs (Pre-W7-Computers WMI filter), and Windows 7
only receives the two GPOs (W7-Computers WMI filter). The GPOs have
Authenticated Users as the apply and read permissions on all of the GPOs.
In our Preferences GPOs, we utilize Item Level Targeting very sparingly
(none of which use WMI) only as absolutely needed. We have not negatively
impacted performance.
Notes:
- Our ILT filters currently only utilize registry keys, and in one
case a security group.
- Some policy settings may actually apply to OSes they are not
supposed to be supported on.
Doug Delaney
Technology Consultant
Americas Regional Delivery Engineering
HP Enterprise Services
Telephone +1 248.285.3665
lab phone +1 248.285.3719
Mobile +1 248.210.4973
Email Doug.Delaney@hp.com
985 W. Entrance Dr., 2A / Auburn Hills, MI 48326
hplogo_forsignature.png
From: gptalk-owner@lists.gpoguy.com [mailto:gptalk-owner@lists.gpoguy.com]
On Behalf Of Juelich, Adam
Sent: Thursday, February 02, 2012 3:25 PM
To: gptalk@lists.gpoguy.com
Subject: [gptalk] Group Policy in Multi-OS Domain
Hello Everyone,
Right now we mostly have XP machines with about a hundred Windows 7
machines. By the end of this summer we hope to have that statistic
reversed. Now, when you have different OS's in a single domain environment
what have you found to be the best way to do this? I see a few different
ways of doing it.
1. Utilize WMI Filters. I have heard that this can impact performance
greatly so I'm cautious about it. When it comes to Group Policy
Preferences, I am already utilizing the Item-Level Filtering for stuff like
this.
2. Have separate OU's for Operating Systems, with blocked inheritance
and assign directly the needed policies.
3. Have conjoined policies since they will filter out automatically
based on which OS's they support (For example, UAC settings)
-----------------------------------------------
Adam Juelich
MCSA, MCSE, MCTS: Vista, A+, Network+
Pulaski Community School District <http://www.pulaski.k12.wi.us>
920-822-6075
"Reason is not automatic. Those who deny it cannot be conquered by it. Do
not count on them. Leave them alone."
― Ayn Rand
| | | |
| acjuelich
Posts:147
| | 02/03/2012 8:40 PM |
| So WMI Filter Queries affect performance just depending on the query being
done? That makes sense. So doing one based on OS, you would say does not
adversely impact performance?
*-----------------------------------------------*
*Adam Juelich*
MCSA, MCSE, MCTS: Vista, A+, Network+
Pulaski Community School District <http://www.pulaski.k12.wi.us>
920-822-6075
*"Reason is not automatic. Those who deny it cannot be conquered by it. Do
not count on them. Leave them alone." *
-- *Ayn Rand*
2012/2/3 Darragh O'Shaughnessy <Darragh.OShaughnessy@vhi.ie>
> I would have to say cautiously, WMI filters ... depending on the filter J***
> *
>
> ** **
>
> Certain queries return large result sets so it really depends on the
> query. I'm quite found of ITL though and find it works very well.****
>
> ** **
>
> ** **
>
> *From:* gptalk-owner@lists.gpoguy.com [mailto:
> gptalk-owner@lists.gpoguy.com] *On Behalf Of *Delaney, Doug
> *Sent:* 02 February 2012 22:28
> *To:* gptalk@lists.gpoguy.com
> *Subject:* RE: [gptalk] Group Policy in Multi-OS Domain****
>
> ** **
>
> We went with separate GPOs in the same Domain/OUs, with a WMI filter to
> apply the GPOs. We did that both for a policy GPO and a Preferences GPO.
> So, XP only receives the 2 GPOs (Pre-W7-Computers WMI filter), and Windows
> 7 only receives the two GPOs (W7-Computers WMI filter). The GPOs have
> Authenticated Users as the apply and read permissions on all of the GPOs.
> In our Preferences GPOs, we utilize Item Level Targeting very sparingly
> (none of which use WMI) only as absolutely needed. We have not negatively
> impacted performance. ****
>
> ** **
>
> Notes: ****
>
> **- **Our ILT filters currently only utilize registry keys, and
> in one case a security group.****
>
> **- **Some policy settings may actually apply to OSes they are
> not supposed to be supported on.****
>
> ** **
>
> ** **
>
> ** **
>
> ** **
>
> Doug Delaney****
>
> Technology Consultant****
>
> Americas Regional Delivery Engineering****
>
> HP Enterprise Services****
>
> Telephone +1 248.285.3665****
>
> lab phone +1 248.285.3719****
>
> Mobile +1 248.210.4973 ****
>
> Email Doug.Delaney@hp.com ****
>
> 985 W. Entrance Dr., 2A / Auburn Hills, MI 48326****
>
> ** **
>
> [image: hplogo_forsignature.png]****
>
> ** **
>
> *From:* gptalk-owner@lists.gpoguy.com
> [mailto:gptalk-owner@lists.gpoguy.com] *On Behalf Of *Juelich, Adam
> *Sent:* Thursday, February 02, 2012 3:25 PM
> *To:* gptalk@lists.gpoguy.com
> *Subject:* [gptalk] Group Policy in Multi-OS Domain****
>
> ** **
>
> Hello Everyone,****
>
> ** **
>
> Right now we mostly have XP machines with about a hundred Windows 7
> machines. By the end of this summer we hope to have that statistic
> reversed. Now, when you have different OS's in a single domain environment
> what have you found to be the best way to do this? I see a few different
> ways of doing it.****
>
> ** **
>
> 1. Utilize WMI Filters. I have heard that this can impact performance
> greatly so I'm cautious about it. When it comes to Group Policy
> Preferences, I am already utilizing the Item-Level Filtering for stuff like
> this.****
> 2. Have separate OU's for Operating Systems, with blocked inheritance
> and assign directly the needed policies.****
> 3. Have conjoined policies since they will filter out automatically
> based on which OS's they support (For example, UAC settings)****
>
> ** **
>
> *-----------------------------------------------*****
>
> *Adam Juelich*****
>
> MCSA, MCSE, MCTS: Vista, A+, Network+****
>
> Pulaski Community School District <http://www.pulaski.k12.wi.us>****
>
> 920-822-6075****
>
> *"**Reason is not automatic. Those who deny it cannot be conquered by it.
> Do not count on them. Leave them alone.**"** *
> -- *A**yn Rand*****
>
> ** **
>
| | | |
| DarraghOShaughnessy
Posts:177
| | 02/04/2012 2:33 PM |
| Again, I'd need to see what query you were running. Querying for things like
services can be very slow as the entries services result set is returned.
Darren himself has highlighted this
· http://www.sdmsoftware.com/wmi/why-win32_product-is-bad-news/
I would say just test it on all the OS you will run it on and if it returns
in 1 or 2 seconds then it should be fine 
From: gptalk-owner@lists.gpoguy.com [mailto:gptalk-owner@lists.gpoguy.com]
On Behalf Of Juelich, Adam
Sent: 03 February 2012 19:32
To: gptalk@lists.gpoguy.com
Subject: Re: [gptalk] Group Policy in Multi-OS Domain
So WMI Filter Queries affect performance just depending on the query being
done? That makes sense. So doing one based on OS, you would say does not
adversely impact performance?
-----------------------------------------------
Adam Juelich
MCSA, MCSE, MCTS: Vista, A+, Network+
Pulaski Community School District <http://www.pulaski.k12.wi.us>
920-822-6075
"Reason is not automatic. Those who deny it cannot be conquered by it. Do
not count on them. Leave them alone."
― Ayn Rand
2012/2/3 Darragh O'Shaughnessy <Darragh.OShaughnessy@vhi.ie>
I would have to say cautiously, WMI filters . depending on the filter J
Certain queries return large result sets so it really depends on the query.
I'm quite found of ITL though and find it works very well.
From: gptalk-owner@lists.gpoguy.com [mailto:gptalk-owner@lists.gpoguy.com]
On Behalf Of Delaney, Doug
Sent: 02 February 2012 22:28
To: gptalk@lists.gpoguy.com
Subject: RE: [gptalk] Group Policy in Multi-OS Domain
We went with separate GPOs in the same Domain/OUs, with a WMI filter to
apply the GPOs. We did that both for a policy GPO and a Preferences GPO.
So, XP only receives the 2 GPOs (Pre-W7-Computers WMI filter), and Windows 7
only receives the two GPOs (W7-Computers WMI filter). The GPOs have
Authenticated Users as the apply and read permissions on all of the GPOs.
In our Preferences GPOs, we utilize Item Level Targeting very sparingly
(none of which use WMI) only as absolutely needed. We have not negatively
impacted performance.
Notes:
- Our ILT filters currently only utilize registry keys, and in one
case a security group.
- Some policy settings may actually apply to OSes they are not
supposed to be supported on.
Doug Delaney
Technology Consultant
Americas Regional Delivery Engineering
HP Enterprise Services
Telephone +1 248.285.3665 <tel:%2B1%20248.285.3665>
lab phone +1 248.285.3719 <tel:%2B1%20248.285.3719>
Mobile +1 248.210.4973 <tel:%2B1%20248.210.4973>
Email Doug.Delaney@hp.com
985 W. Entrance Dr., 2A / Auburn Hills, MI 48326
From: gptalk-owner@lists.gpoguy.com [mailto:gptalk-owner@lists.gpoguy.com]
On Behalf Of Juelich, Adam
Sent: Thursday, February 02, 2012 3:25 PM
To: gptalk@lists.gpoguy.com
Subject: [gptalk] Group Policy in Multi-OS Domain
Hello Everyone,
Right now we mostly have XP machines with about a hundred Windows 7
machines. By the end of this summer we hope to have that statistic
reversed. Now, when you have different OS's in a single domain environment
what have you found to be the best way to do this? I see a few different
ways of doing it.
1. Utilize WMI Filters. I have heard that this can impact performance
greatly so I'm cautious about it. When it comes to Group Policy
Preferences, I am already utilizing the Item-Level Filtering for stuff like
this.
2. Have separate OU's for Operating Systems, with blocked inheritance
and assign directly the needed policies.
3. Have conjoined policies since they will filter out automatically
based on which OS's they support (For example, UAC settings)
-----------------------------------------------
Adam Juelich
MCSA, MCSE, MCTS: Vista, A+, Network+
Pulaski Community School District <http://www.pulaski.k12.wi.us>
920-822-6075
"Reason is not automatic. Those who deny it cannot be conquered by it. Do
not count on them. Leave them alone."
― Ayn Rand
| | | |
| dmarelia
Posts:442
| | 02/04/2012 4:55 PM |
| Also-I added a timing check to my WMI filter test utility (http://www.gpoguy.com/FreeTools/FreeToolsLibrary/tabid/67/agentType/View/PropertyID/93/Default.aspx) so you can run a filter against a test system to see how long it takes to evaluate.
Darren
From: gptalk-owner@lists.gpoguy.com [mailto:gptalk-owner@lists.gpoguy.com] On Behalf Of Darragh O'Shaughnessy
Sent: Saturday, February 04, 2012 5:23 AM
To: gptalk@lists.gpoguy.com
Subject: RE: [gptalk] Group Policy in Multi-OS Domain
Again, I'd need to see what query you were running. Querying for things like services can be very slow as the entries services result set is returned. Darren himself has highlighted this
· http://www.sdmsoftware.com/wmi/why-win32_product-is-bad-news/
I would say just test it on all the OS you will run it on and if it returns in 1 or 2 seconds then it should be fine
From: gptalk-owner@lists.gpoguy.com<mailto:gptalk-owner@lists.gpoguy.com> [mailto:gptalk-owner@lists.gpoguy.com]<mailto:[mailto:gptalk-owner@lists.gpoguy.com]> On Behalf Of Juelich, Adam
Sent: 03 February 2012 19:32
To: gptalk@lists.gpoguy.com<mailto:gptalk@lists.gpoguy.com>
Subject: Re: [gptalk] Group Policy in Multi-OS Domain
So WMI Filter Queries affect performance just depending on the query being done? That makes sense. So doing one based on OS, you would say does not adversely impact performance?
-----------------------------------------------
Adam Juelich
MCSA, MCSE, MCTS: Vista, A+, Network+
Pulaski Community School District<http://www.pulaski.k12.wi.us>
920-822-6075
"Reason is not automatic. Those who deny it cannot be conquered by it. Do not count on them. Leave them alone."
― Ayn Rand
2012/2/3 Darragh O'Shaughnessy <Darragh.OShaughnessy@vhi.ie<mailtoarragh.OShaughnessy@vhi.ie>>
I would have to say cautiously, WMI filters ... depending on the filter 
Certain queries return large result sets so it really depends on the query. I'm quite found of ITL though and find it works very well.
From: gptalk-owner@lists.gpoguy.com<mailto:gptalk-owner@lists.gpoguy.com> [mailto:gptalk-owner@lists.gpoguy.com<mailto:gptalk-owner@lists.gpoguy.com>] On Behalf Of Delaney, Doug
Sent: 02 February 2012 22:28
To: gptalk@lists.gpoguy.com<mailto:gptalk@lists.gpoguy.com>
Subject: RE: [gptalk] Group Policy in Multi-OS Domain
We went with separate GPOs in the same Domain/OUs, with a WMI filter to apply the GPOs. We did that both for a policy GPO and a Preferences GPO. So, XP only receives the 2 GPOs (Pre-W7-Computers WMI filter), and Windows 7 only receives the two GPOs (W7-Computers WMI filter). The GPOs have Authenticated Users as the apply and read permissions on all of the GPOs. In our Preferences GPOs, we utilize Item Level Targeting very sparingly (none of which use WMI) only as absolutely needed. We have not negatively impacted performance.
Notes:
- Our ILT filters currently only utilize registry keys, and in one case a security group.
- Some policy settings may actually apply to OSes they are not supposed to be supported on.
Doug Delaney
Technology Consultant
Americas Regional Delivery Engineering
HP Enterprise Services
Telephone +1 248.285.3665<tel:%2B1%20248.285.3665>
lab phone +1 248.285.3719<tel:%2B1%20248.285.3719>
Mobile +1 248.210.4973<tel:%2B1%20248.210.4973>
Email Doug.Delaney@hp.com<mailtooug.Delaney@hp.com>
985 W. Entrance Dr., 2A / Auburn Hills, MI 48326
From: gptalk-owner@lists.gpoguy.com<mailto:gptalk-owner@lists.gpoguy.com> [mailto:gptalk-owner@lists.gpoguy.com]<mailto:[mailto:gptalk-owner@lists.gpoguy.com]> On Behalf Of Juelich, Adam
Sent: Thursday, February 02, 2012 3:25 PM
To: gptalk@lists.gpoguy.com<mailto:gptalk@lists.gpoguy.com>
Subject: [gptalk] Group Policy in Multi-OS Domain
Hello Everyone,
Right now we mostly have XP machines with about a hundred Windows 7 machines. By the end of this summer we hope to have that statistic reversed. Now, when you have different OS's in a single domain environment what have you found to be the best way to do this? I see a few different ways of doing it.
1. Utilize WMI Filters. I have heard that this can impact performance greatly so I'm cautious about it. When it comes to Group Policy Preferences, I am already utilizing the Item-Level Filtering for stuff like this.
2. Have separate OU's for Operating Systems, with blocked inheritance and assign directly the needed policies.
3. Have conjoined policies since they will filter out automatically based on which OS's they support (For example, UAC settings)
-----------------------------------------------
Adam Juelich
MCSA, MCSE, MCTS: Vista, A+, Network+
Pulaski Community School District<http://www.pulaski.k12.wi.us>
920-822-6075<tel:920-822-6075>
"Reason is not automatic. Those who deny it cannot be conquered by it. Do not count on them. Leave them alone."
― Ayn Rand
| | | |
| acjuelich
Posts:147
| | 02/08/2012 5:47 PM |
| That tool rocks, Darren! Thank you!
*-----------------------------------------------*
*Adam Juelich*
MCSA, MCSE, MCTS: Vista, A+, Network+
Pulaski Community School District <http://www.pulaski.k12.wi.us>
920-822-6075
*"Reason is not automatic. Those who deny it cannot be conquered by it. Do
not count on them. Leave them alone." *
-- *Ayn Rand*
2012/2/4 Darren Mar-Elia <darren@sdmsoftware.com>
> Also--I added a timing check to my WMI filter test utility (
> http://www.gpoguy.com/FreeTools/FreeToolsLibrary/tabid/67/agentType/View/PropertyID/93/Default.aspx)
> so you can run a filter against a test system to see how long it takes to
> evaluate.****
>
> ** **
>
> Darren****
>
> ** **
>
> *From:* gptalk-owner@lists.gpoguy.com [mailto:
> gptalk-owner@lists.gpoguy.com] *On Behalf Of *Darragh O'Shaughnessy
> *Sent:* Saturday, February 04, 2012 5:23 AM
>
> *To:* gptalk@lists.gpoguy.com
> *Subject:* RE: [gptalk] Group Policy in Multi-OS Domain****
>
> ** **
>
> Again, I'd need to see what query you were running. Querying for things
> like services can be very slow as the entries services result set is
> returned. Darren himself has highlighted this****
>
> ** **
>
> **· **
> http://www.sdmsoftware.com/wmi/why-win32_product-is-bad-news/****
>
> ** **
>
> I would say just test it on all the OS you will run it on and if it
> returns in 1 or 2 seconds then it should be fine ****
>
> ** **
>
> *From:* gptalk-owner@lists.gpoguy.com
> [mailto:gptalk-owner@lists.gpoguy.com] *On Behalf Of *Juelich, Adam
> *Sent:* 03 February 2012 19:32
> *To:* gptalk@lists.gpoguy.com
> *Subject:* Re: [gptalk] Group Policy in Multi-OS Domain****
>
> ** **
>
> So WMI Filter Queries affect performance just depending on the query being
> done? That makes sense. So doing one based on OS, you would say does not
> adversely impact performance?****
>
>
> ****
>
> *-----------------------------------------------*****
>
> *Adam Juelich*****
>
> MCSA, MCSE, MCTS: Vista, A+, Network+****
>
> Pulaski Community School District <http://www.pulaski.k12.wi.us>****
>
> 920-822-6075****
>
> *"**Reason is not automatic. Those who deny it cannot be conquered by it.
> Do not count on them. Leave them alone.**"** *
> -- *A**yn Rand*****
>
> ** **
>
> 2012/2/3 Darragh O'Shaughnessy <Darragh.OShaughnessy@vhi.ie>****
>
> I would have to say cautiously, WMI filters ... depending on the filter J***
> *
>
> ****
>
> Certain queries return large result sets so it really depends on the
> query. I'm quite found of ITL though and find it works very well.****
>
> ****
>
> ****
>
> *From:* gptalk-owner@lists.gpoguy.com [mailto:
> gptalk-owner@lists.gpoguy.com] *On Behalf Of *Delaney, Doug
> *Sent:* 02 February 2012 22:28
> *To:* gptalk@lists.gpoguy.com
> *Subject:* RE: [gptalk] Group Policy in Multi-OS Domain****
>
> ****
>
> We went with separate GPOs in the same Domain/OUs, with a WMI filter to
> apply the GPOs. We did that both for a policy GPO and a Preferences GPO.
> So, XP only receives the 2 GPOs (Pre-W7-Computers WMI filter), and Windows
> 7 only receives the two GPOs (W7-Computers WMI filter). The GPOs have
> Authenticated Users as the apply and read permissions on all of the GPOs.
> In our Preferences GPOs, we utilize Item Level Targeting very sparingly
> (none of which use WMI) only as absolutely needed. We have not negatively
> impacted performance. ****
>
> ****
>
> Notes: ****
>
> - Our ILT filters currently only utilize registry keys, and in
> one case a security group.****
>
> - Some policy settings may actually apply to OSes they are not
> supposed to be supported on.****
>
> ****
>
> ****
>
> ****
>
> ****
>
> Doug Delaney****
>
> Technology Consultant****
>
> Americas Regional Delivery Engineering****
>
> HP Enterprise Services****
>
> Telephone +1 248.285.3665****
>
> lab phone +1 248.285.3719****
>
> Mobile +1 248.210.4973 <%2B1%20248.210.4973> ****
>
> Email Doug.Delaney@hp.com ****
>
> 985 W. Entrance Dr., 2A / Auburn Hills, MI 48326****
>
> ****
>
> ** **
>
> ****
>
> *From:* gptalk-owner@lists.gpoguy.com
> [mailto:gptalk-owner@lists.gpoguy.com] *On Behalf Of *Juelich, Adam
> *Sent:* Thursday, February 02, 2012 3:25 PM
> *To:* gptalk@lists.gpoguy.com
> *Subject:* [gptalk] Group Policy in Multi-OS Domain****
>
> ****
>
> Hello Everyone,****
>
> ****
>
> Right now we mostly have XP machines with about a hundred Windows 7
> machines. By the end of this summer we hope to have that statistic
> reversed. Now, when you have different OS's in a single domain environment
> what have you found to be the best way to do this? I see a few different
> ways of doing it.****
>
> ****
>
> 1. Utilize WMI Filters. I have heard that this can impact performance
> greatly so I'm cautious about it. When it comes to Group Policy
> Preferences, I am already utilizing the Item-Level Filtering for stuff like
> this.****
> 2. Have separate OU's for Operating Systems, with blocked inheritance
> and assign directly the needed policies.****
> 3. Have conjoined policies since they will filter out automatically
> based on which OS's they support (For example, UAC settings)****
>
> ****
>
> *-----------------------------------------------*****
>
> *Adam Juelich*****
>
> MCSA, MCSE, MCTS: Vista, A+, Network+****
>
> Pulaski Community School District <http://www.pulaski.k12.wi.us>****
>
> 920-822-6075****
>
> *"**Reason is not automatic. Those who deny it cannot be conquered by it.
> Do not count on them. Leave them alone.**"** *
> -- *Ayn Rand*****
>
> ****
>
> ** **
>
| | | |
|
|