Here's a link with a short list of best practices (this is for Windows Server 2003, but most of the stuff here applies to Windows 2000 too):
http://www.microsoft.com/technet/treeview/default.asp
url=/technet/prodtechnol/windowsserver2003/proddocs/entserver/sag_sp_bestprac.asp
Also, the "Troubleshooting Group Policy in Windows 2000" White Paper provides some great information. There is a Best Practices
section at the end of this doc, but it is very short. You can get this White Paper at
http://www.microsoft.com/windows2000...t/gptshoot.asp.
--
Jimmy Harper [MSFT]
Directory Services
This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified
at
http://www.microsoft.com/info/cpyright.htm
Note: For the benefit of the community-at-large, all responses to this message are best directed to the newsgroup/thread from which they
originated.
--------------------
>From: "Ahmed" <ahmed_al-(E-Mail Removed)>
>References: <#(E-Mail Removed)> <$(E-Mail Removed)>
>Subject: Re: GPO health check
>Date: Tue, 12 Aug 2003 10:17:08 -0600
>Lines: 81
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
>Message-ID: <(E-Mail Removed)>
>Newsgroups: microsoft.public.win2000.group_policy
>NNTP-Posting-Host: gateway.nexeninc.com 204.209.24.2
>Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
>Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.group_policy:11809
>X-Tomcat-NG: microsoft.public.win2000.group_policy
>
>Hi Jimmy
>
>Thanks for your response. I'm familiar with GPMC but I never knew about the
>scripts. Thanks again!
>
>P.S: Do you know of any best practices (checklist) for general GPO
>administration? Things that should be monitored closely over a period of
>time?
>
>Thanks again!
>
>"Jimmy Harper [MSFT]" <(E-Mail Removed)> wrote in message
>news:$(E-Mail Removed)...
>> Hi Ahmed. I think you may want to look into GPMC (Group Policy Management
>Console). This provides a great interface for managing
>> group policy, and also includes several scripts to set permissions and do
>other Group Policy management tasks (after installing GPMC,
>> the scripts will be in the \program files\GPMC\Scripts directory).
>>
>> The GPMC can be downloaded from
>http://www.microsoft.com/downloads/d...D60-7E41-4947-
>> 82F5-3330F37ADFEB
>>
>> --
>> Jimmy Harper [MSFT]
>> Directory Services
>>
>> This posting is provided "AS IS" with no warranties, and confers no
>rights. Use of included script samples are subject to the terms specified
>> at http://www.microsoft.com/info/cpyright.htm
>>
>> Note: For the benefit of the community-at-large, all responses to this
>message are best directed to the newsgroup/thread from which they
>> originated.
>> --------------------
>> >From: "Ahmed" <ahmed_al-(E-Mail Removed)>
>> >Subject: GPO health check
>> >Date: Tue, 12 Aug 2003 08:25:07 -0600
>> >Lines: 12
>> >X-Priority: 3
>> >X-MSMail-Priority: Normal
>> >X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
>> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
>> >Message-ID: <#(E-Mail Removed)>
>> >Newsgroups: microsoft.public.win2000.group_policy
>> >NNTP-Posting-Host: gateway.nexeninc.com 204.209.24.2
>> >Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP12.phx.gbl
>> >Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.group_policy:11795
>> >X-Tomcat-NG: microsoft.public.win2000.group_policy
>> >
>> >Hi,
>> >I'm looking for some scripts that can be used to monitor various GPO
>> >maintenance related issues on a daily, weekly, and monthly basis (i.e.
>> >manage permissions, group assignments, user assignments, update
>procedures,
>> >GPO impact assessment...etc). Any info is appreciated. Best pracitces
>will
>> >do as well.
>> >
>> >Thanks!
>> >
>> >Ahmed
>> >
>> >
>> >
>>
>>
>> --
>> Jimmy Harper [MSFT]
>> Directory Services
>>
>> This posting is provided "AS IS" with no warranties, and confers no
>rights. Use of included script samples are subject to the terms specified
>> at http://www.microsoft.com/info/cpyright.htm
>>
>> Note: For the benefit of the community-at-large, all responses to this
>message are best directed to the newsgroup/thread from which they
>> originated.
>>
>
>
>
--
Jimmy Harper [MSFT]
Directory Services
This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified
at
http://www.microsoft.com/info/cpyright.htm
Note: For the benefit of the community-at-large, all responses to this message are best directed to the newsgroup/thread from which they
originated.