Group Policy Deployment?...

[Bunce]

Hey everyone,

got a new problem that i'm unsure on how to work around.

I need to set Group Policy settings for all computers within the company, but we dont use Active Directory or a logon procedure.

Does anyone know how i can get all the required settings installed an easier way than going to every computer?

script?
batch file?

Please, if you have any ideas or suggestions, share them

[Anonymous]

Originally posted by Bunce@Mar 31 2006, 09:12 AM
Hey everyone,

got a new problem that i'm unsure on how to work around.

I need to set Group Policy settings for all computers within the company, but we dont use Active Directory or a logon procedure.

Does anyone know how i can get all the required settings installed an easier way than going to every computer?

script?
batch file?

Please, if you have any ideas or suggestions, share them

[post=120208]Quoted post[/post]

[/b]

Quite frankly I think you should get hte mamnagement to buy into sorting the network first. You cannot properly support an IS infrastructure when even the basics aren't in place.

Personally without a domain I would have changed the login to run a script but as you don't even have a logon process your a bit knackered. How do you fancy manually visiting evrey PC?

[Gandalf]

:withstupid:

get a domain. makes administration so much simpler.

[Rabbi Bob]

I took a class over here on GPO and what you can do with GP is just amazing if you have the structure in place to use it.  I'd really take the time to start the approach from the ground up, even if it means it will be a long process to convert everyone over to a domain strategy.  Otherwise you'll just be playing with local policies and as stated, you'll have to individually touch every machine and forbid that something goes wrong with a policy...then you'd have to individually pull it back too....   :ranting:

The class giver I took has a home page and a forum, however they will expect that there is AD in place before answering any questions.  

http://www.gpanswers.com/

If you need a pitch to sell to management on this:  properly implemented you will be able to increase security, increase your efficiency by being able to deploy installation packages for many programs (GPSI/RIS/ADS) and deliver them across the network based on policy ("oh, Mr. Business President, you're logging onto this PC and it doesn't have on it?  Wait a moment while it is installed..." or "a new version of Adobe Reader is out, on the next boot up all PC's in the East Office OrgUnit will be updated with the new MSI package"), provide alternate backup solutions (Shadow Copy/Folder redirection/etc), implement SUS patch management to keep all your PC's patched, blah blah blah.  Heck, with RIS you can deploy the entire OS (though it is not as fast as an image based system.

There are many points and my coffee is calling, but suffice to say that getting your domain structure under AD together will lead to many new avenues.  Not to say that any of these things are easy out of the box things, they will take time to develop, test and implement properly.