Group Policy

[Guest]

I have a Windows 2003 server and installed GPMC on it. I am now advised by
one of our network administrators that I will not be able to implement the
Group Policy Admin templates from GPMC on Windows 2000 servers and DCs
because the policies are not compatible. Is that correct?

 

[Steven L Umbach]

When you configure Group Policy settings [other than security settings] it
will display what the minimum operating system is for the setting. Windows
2000 will ignore settings that require the operating system to be XP Pro or
Windows 2003 but all the Windows 2000 settings will be available. I highly
recommend the use of GPMC with all the extra features.

What you should beware of is that "security" templates are different between
Windows 2000 and 2003/XP Pro particularly for security options in that
2003/XP Pro have a lot more and that there are no user rights for logon
through terminal services in Windows 2000. I would not recommend applying
Windows 2000 security templates to Windows 2003 computers or vice versa due
to unpredictable results of what the configuration will end up being. When
in doubt on a Windows 2000 server check the "effective settings" in Local
Security Policy or the settings in Local Security Policy for Windows 2003 or
better yet run the Security Configuration and Analysis tool to find the
current configuration for security settings. --- Steve