Hello Everyone,
we are running an environment with a mixture of domain controllers running 2003, 2008 R2 and 2012 R2 in a native 2003 domain. We have a central policy definition store under SYSVOL. We have XP, Win7 and Win8.1 clients. The last few years we have made it a habit of editing our GPOs directly on the domain controllers. This is becoming a major issue now that we are running different versions on the DCs and clients. We have had policies that
- can be edited on one dc version but not on the other
- can be edited on one dc version but cannot be seen on the other
- where created on one dc version, then edited on a newer dc version and failed to work on the clients afterwards
We need some guidance / best practices on how to edit the policies properly. Should this be done on the DCs? Or dedicated workstations? Should a Win8.1 policy be created from a Win8.1 client?
Can anyone point out a good document or link?
Thanks & Regards
HarryH