Prev: Backup Schedule for 2003 Domain Controllers
Next: Migrate CA from the W2003 DC to a W2008R2 DC
From: DaveMills on 20 Apr 2010 03:15
If you are having to support W7 PC then I would say you have a cast iron case
for upgrading yourself first.


On Mon, 19 Apr 2010 12:52:15 +0100, Adrian Marsh
<adrian.marsh(a)removemeubiquisys.com> wrote:

>Hi Meinolf,
>
>As I read through that text, an old question of mine re-appears, that
>you and Ace partially answered for me last year, which was, in summary,
>"how to administer Windows Vista/Windows 7 GPOs".
>
>You're advice I think, was to use RSAT on a Windows 7 client against a
>2008 server.
>However, I only have a Windows XP client myself, and am in a 2003-only
>environment.
>
>At this point, I seem to be able to use the XP 2003 GPO MMC to edit/view
>some policy settings, but a lot appear as Extra registry Settings.
>
>I know that Vista/7 switched to using .admx files, but can I edit/view
>these from a XP/2003 station?
>
>Thanks,
>
>Adrian
>
>
>On 16/04/2010 10:43, Meinolf Weber [MVP-DS] wrote:
>> Hello Adrian,
>>
>> Check this one about:
>> http://technet.microsoft.com/en-us/library/cc709628(WS.10).aspx
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>
>>> Hi All,
>>>
>>> Am having to venture now into starting to deploy Windows 7 Pro into
>>> our AD (2003) environment. Current platform is all XP SP3/ Server
>>> 2003 based.
>>>
>>> All of my users are set as local admins via group policy. And I need
>>> to try and understand how that plays into UAC and Admin rights in
>>> Windows 7.
>>>
>>> For example,
>>>
>>> Using an existing 2003-AD Domained account, I can't see to install
>>> applications without having UAC kick in and ask for elevation.
>>> When I put in my normal-user account details, it fails and repeats. I
>>> have to enter a domain-admin account login to get the software to
>>> install.
>>> I don't really want to have to turn UAC off unless its essential, as I
>>> do agree with it checking for certain things, but can't see how to tie
>>> that back into the current infrastructure.
>>>
>>> Any advice??
>>>
>>> Thanks
>>>
>>> Adrian
>>>
>>
>>
--
Dave Mills
There are 10 types of people, those that understand binary and those that don't.
From: Adrian Marsh on 20 Apr 2010 10:16
You'd think that wouldn't you.... :-), and that there'd be training...

Unfortunately, its a single PC requirement needed ASAP, which means I
don't get much time to go learning things.

I've now built up an "admin" PC with Win7 on it, and got the RSAT tools
installed, however when I try and modify a GPO I get a save error on
saving a "gpttmpl.inf" file, which I need to figure out. I think it
might be because the AD was originally a Win2003 SBS server, but need to
investigate.

Adrian

On 20/04/2010 08:15, DaveMills wrote:
> If you are having to support W7 PC then I would say you have a cast iron case
> for upgrading yourself first.
>
>
> On Mon, 19 Apr 2010 12:52:15 +0100, Adrian Marsh
> <adrian.marsh(a)removemeubiquisys.com> wrote:
>
>> Hi Meinolf,
>>
>> As I read through that text, an old question of mine re-appears, that
>> you and Ace partially answered for me last year, which was, in summary,
>> "how to administer Windows Vista/Windows 7 GPOs".
>>
>> You're advice I think, was to use RSAT on a Windows 7 client against a
>> 2008 server.
>> However, I only have a Windows XP client myself, and am in a 2003-only
>> environment.
>>
>> At this point, I seem to be able to use the XP 2003 GPO MMC to edit/view
>> some policy settings, but a lot appear as Extra registry Settings.
>>
>> I know that Vista/7 switched to using .admx files, but can I edit/view
>> these from a XP/2003 station?
>>
>> Thanks,
>>
>> Adrian
>>
>>
>> On 16/04/2010 10:43, Meinolf Weber [MVP-DS] wrote:
>>> Hello Adrian,
>>>
>>> Check this one about:
>>> http://technet.microsoft.com/en-us/library/cc709628(WS.10).aspx
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>
>>>> Hi All,
>>>>
>>>> Am having to venture now into starting to deploy Windows 7 Pro into
>>>> our AD (2003) environment. Current platform is all XP SP3/ Server
>>>> 2003 based.
>>>>
>>>> All of my users are set as local admins via group policy. And I need
>>>> to try and understand how that plays into UAC and Admin rights in
>>>> Windows 7.
>>>>
>>>> For example,
>>>>
>>>> Using an existing 2003-AD Domained account, I can't see to install
>>>> applications without having UAC kick in and ask for elevation.
>>>> When I put in my normal-user account details, it fails and repeats. I
>>>> have to enter a domain-admin account login to get the software to
>>>> install.
>>>> I don't really want to have to turn UAC off unless its essential, as I
>>>> do agree with it checking for certain things, but can't see how to tie
>>>> that back into the current infrastructure.
>>>>
>>>> Any advice??
>>>>
>>>> Thanks
>>>>
>>>> Adrian
>>>>
>>>
>>>
From: Adrian Marsh on 20 Apr 2010 13:00
Hi Meinolf,

If a user "user1" is part of Domain Users, and Domain Users is put
inside the Restricted Groups. Is "user1" considered on windows 7 as
being an "administrator user" or a "standard user"? In the GPO setting,
I'm trying different things in "User Account Control: **" settings, but
the don't seem to be doing what I thought they would. (I gpupdate on
the client, and rsop.msc to make sure the policy changes take effect).

Thanks

Adrian

On 16/04/2010 10:43, Meinolf Weber [MVP-DS] wrote:
> Hello Adrian,
>
> Check this one about:
> http://technet.microsoft.com/en-us/library/cc709628(WS.10).aspx
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Hi All,
>>
>> Am having to venture now into starting to deploy Windows 7 Pro into
>> our AD (2003) environment. Current platform is all XP SP3/ Server
>> 2003 based.
>>
>> All of my users are set as local admins via group policy. And I need
>> to try and understand how that plays into UAC and Admin rights in
>> Windows 7.
>>
>> For example,
>>
>> Using an existing 2003-AD Domained account, I can't see to install
>> applications without having UAC kick in and ask for elevation.
>> When I put in my normal-user account details, it fails and repeats. I
>> have to enter a domain-admin account login to get the software to
>> install.
>> I don't really want to have to turn UAC off unless its essential, as I
>> do agree with it checking for certain things, but can't see how to tie
>> that back into the current infrastructure.
>>
>> Any advice??
>>
>> Thanks
>>
>> Adrian
>>
>
>
From: Adrian Marsh on 21 Apr 2010 08:52
ARHhhhhhhh

The Original SBS GPO had WMI Filtering on it, I think making the Domain
Users/Res. Groups policy not apply...

Am retrying now after duplicating the GPO and applying a Vista/Win7
Filter to it.

On 20/04/2010 18:00, Adrian Marsh wrote:
> Hi Meinolf,
>
> If a user "user1" is part of Domain Users, and Domain Users is put
> inside the Restricted Groups. Is "user1" considered on windows 7 as
> being an "administrator user" or a "standard user"? In the GPO setting,
> I'm trying different things in "User Account Control: **" settings, but
> the don't seem to be doing what I thought they would. (I gpupdate on the
> client, and rsop.msc to make sure the policy changes take effect).
>
> Thanks
>
> Adrian
>
> On 16/04/2010 10:43, Meinolf Weber [MVP-DS] wrote:
>> Hello Adrian,
>>
>> Check this one about:
>> http://technet.microsoft.com/en-us/library/cc709628(WS.10).aspx
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>
>>> Hi All,
>>>
>>> Am having to venture now into starting to deploy Windows 7 Pro into
>>> our AD (2003) environment. Current platform is all XP SP3/ Server
>>> 2003 based.
>>>
>>> All of my users are set as local admins via group policy. And I need
>>> to try and understand how that plays into UAC and Admin rights in
>>> Windows 7.
>>>
>>> For example,
>>>
>>> Using an existing 2003-AD Domained account, I can't see to install
>>> applications without having UAC kick in and ask for elevation.
>>> When I put in my normal-user account details, it fails and repeats. I
>>> have to enter a domain-admin account login to get the software to
>>> install.
>>> I don't really want to have to turn UAC off unless its essential, as I
>>> do agree with it checking for certain things, but can't see how to tie
>>> that back into the current infrastructure.
>>>
>>> Any advice??
>>>
>>> Thanks
>>>
>>> Adrian
>>>
>>
>>
From: nhlapc on 22 Apr 2010 18:29

> GUEST wrote:
> Hi All,
>
> Am having to venture now into starting to deploy Windows 7 Pro into
our
> AD (2003) environment. Current platform is all XP SP3/ Server 2003
based.
>
> All of my users are set as local admins via group policy. And I
need to
> try and understand how that plays into UAC and Admin rights in
Windows 7.
>
> For example,
>
> Using an existing 2003-AD Domained account, I can't see to install
> applications without having UAC kick in and ask for elevation.
> When I put in my normal-user account details, it fails and repeats.
I
> have to enter a domain-admin account login to get the software to
install.
>
> I don't really want to have to turn UAC off unless its essential,
as I
> do agree with it checking for certain things, but can't see how to
tie
> that back into the current infrastructure.
>
> Any advice??
>
> Thanks
>
> Adrian

Hi, Adrian. I have to agree with Dave on this one.
By the way, are you the Adrian formerly from Marsh Communications?

First  |  Prev  |  Next  |  Last
Pages: 1 2 3
Prev: Backup Schedule for 2003 Domain Controllers
Next: Migrate CA from the W2003 DC to a W2008R2 DC