Microsoft® Windows® Server 2003 Deployment Kit Designing A
Total Page:16
File Type:pdf, Size:1020Kb
Microsoft® Windows® Server 2003 Deployment Kit Designing a Managed Environment A Resource Kit Publication Microsoft Corporation Information in this document is subject to change without notice. Companies, names, and data used in examples herein are fictitious unless otherwise noted. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of Microsoft Corporation. © 2003 Microsoft Corporation. All rights reserved. Active Directory, ActiveX, FrontPage, JScript, Microsoft, Microsoft Press, MS, MSDN, MS-DOS, Notepad, SQL Server, Visual Basic, Visual Studio, Windows, Windows Media, Windows NT, and Win32 are registered trademarks of Microsoft Corporation in the USA and other countries. Microsoft may have patents or pending patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. The furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property rights except as expressly provided in any written license agreement from Microsoft. IBM is a registered trademark of International Business Machines Corporation. NetWare is a registered trademark of the Novell Corporation. Apple and Macintosh are registered trademarks of the Apple Corporation. ActivePerl is a registered trademark of the ActiveState Corporation. Document No. X08-39349 Printed in the United States of America. Contents at a glance INTRODUCTION ............................................................................................................................... xvii CHAPTER 1 Planning a Managed Environment ..............................................................................1 CHAPTER 2 Designing a Group Policy Infrastructure ................................................................. 51 CHAPTER 3 Staging Group Policy Deployments ........................................................................ 119 CHAPTER 4 Deploying Security Policy ....................................................................................... 157 CHAPTER 5 Deploying Microsoft Software Update Services ................................................... 197 CHAPTER 6 Migrating User State ............................................................................................... 235 CHAPTER 7 Implementing User State Management ................................................................ 263 CHAPTER 8 Deploying a Managed Software Environment ....................................................... 343 CHAPTER 9 Deploying a Simple Managed Environment .......................................................... 429 GLOSSARY....................................................................................................................................... 481 INDEX............................................................................................................................................... 495 Contents INTRODUCTION .............................................................................................................................xvii Deployment Kit Compact Disc ................................................................................xviii Document Conventions ............................................................................................xix Support Policy .........................................................................................................xxiii CHAPTER 1 Planning a Managed Environment ........................................................................... 1 Overview of Deploying a Managed Environment Process .........................................2 IntelliMirror Deployment Process .........................................................................4 Introduction to IntelliMirror Configuration Management Technologies .............7 IntelliMirror Technologies ..............................................................................8 IntelliMirror Implementation Examples ............................................................ 11 Setting up the New Employee’s Computer Example ................................. 12 Logging on the First Time Example ............................................................ 12 Making Offline Files Accessible to a Portable Computer Example ........... 13 Setting up a Shared Computer Environment Example .............................. 13 Replacing a Computer Example ................................................................. 14 Implementing a Customized Home Page URL for all Domain Users Example ............................................................................... 14 Managing Desktops in Non–Active Directory Environments .................... 15 Developing a Deployment Plan ............................................................................... 16 Defining the Scope of Your Configuration Management Project ........................... 17 Assessing Your Current Environment ...................................................................... 18 Evaluating Your Desktop Management Processes .......................................... 19 Evaluating Computer and User Roles ............................................................... 20 Categorizing Users by Job Types and Location .......................................... 20 Evaluating Your Security Requirements ........................................................... 23 Determining Corporate Policies ........................................................................ 24 vi Contents Assessing Network and Storage Requirements ............................................... 24 Determining Your Requirements for Configuration Management Technologies ..................................................................................... 28 Identifying the IntelliMirror Technologies That Meet Your Configuration Management Needs ................................................................... 31 Designing Managed Configurations ........................................................................ 37 Mapping Managed Configurations to User and Computer Roles ................... 37 Designing Your Organizational Unit Structure ........................................................ 44 Application of Group Policy ......................................................................... 45 Testing Your Configuration Management Design ................................................... 45 Conducting Proof of Concept Testing ......................................................... 46 Conducting Pilot Testing ............................................................................. 47 Preparing Users for Deployment ................................................................. 47 Staging and Deploying Your Design to the Production Environment .................... 48 Additional Resources ............................................................................................... 48 CHAPTER 2 Designing a Group Policy Infrastructure ...............................................................51 Group Policy Overview .............................................................................................. 52 Process for Implementing a Group Policy Solution ......................................... 54 What You Need Before Designing Your Group Policy Solution ................. 55 New in Windows Server 2003: Group Policy Management ............................ 56 Planning Your Group Policy Design ......................................................................... 58 Designing an OU Structure that Supports Group Policy ................................. 59 Complying with Service Level Agreements ....................................................... 62 Defining Your Group Policy Objectives .............................................................. 63 Establishing Group Policy Operational Guidelines ........................................... 64 Identifying Interoperability Issues ..................................................................... 65 Determining When Group Policy Changes are Applied ............................. 66 Identifying Issues Pertaining to Software Installation .................................... 68 Designing Your Group Policy Model ........................................................................ 68 Defining the Scope of Application of Group Policy ........................................... 70 Determining the Number of Group Policy Objects ........................................... 72 Linking GPOs ................................................................................................ 73 Using Security Filtering to Apply GPOs to Selected Groups ...................... 75 Applying WMI Filters .................................................................................... 76 Using Group Policy Inheritance ......................................................................... 80 Deploying Group Policy ............................................................................................ 82 Creating and Working with GPOs ...................................................................... 83 Contents vii Using Loopback Processing to Configure User Settings ................................. 87 Delegating Administration of Group Policy ....................................................... 88 Defining Group Policy Operational Procedures .........................................