Installing and Managing Group Policy Preferences on a Windows Server 2003 Domain


It is possible to run Group Policy Preferences on a Windows Server 2003 Domain.  This post will step you through the process so you can get it deployed in your organization if you have not yet upgraded your domain to Windows Server 2008.  I am a huge fan of Windows Server 2008 so if you have the capability to upgrading one of your domain controllers to 2008, that would be my preference.  However, there are cases where upgrading the domain is a drawn out technical or political process so I wanted to share “instructions” on how to make this great technology work with a 2003 Domain.


Assumptions 



  • Windows Server 2003 Domain  (may work in a 2000 domain but I have not tested)

  • Windows Server 2003 Server has all updates applied including SP2

  • Windows Vista workstation (with all patches including SP1 installed) is attached to the domain

    • Windows 2008 attached to the domain would be acceptable in place of the Vista machine

  • Client Side Extensions would need to be installed on all machines that would need to have group policy extensions applied (free download from Microsoft) best to deploy via WSUS or other distribution method

  • All group policy changes would need to be made from a Windows Vista or Windows Server 2008 machine after preferences are added

 Enable Group Policy Management Tools in Vista


Turning On Group Policy Preferences on Windows Vista SP1


The first thing you need to do is download and install Remote Server Administration Tools (KB941314) onto a Windows Vista SP1 machine with all patches installed. This will install the GPMC components.  Notice when you do the install, it puts the bits on the workstation but it does not install them.  You have to go to … Start\Control Panel\Programs and Features\Turn Windows Features On and Off.  Scroll down the list and expand “Remote Server Administration Tools“; Expand “Feature Administration Tools“; Turn on “Group Policy Management Tools“.  It is the installation of Remote Server Administration Tools (KB941314) that installs these components so if it is not in your list something was not successful with your prior installation.


Install Group Policy Preferences in Windows Server 2008 Client Side ExtensionsEdit Group Policy from Group Policy Managment Tool


Finally, you need to install the Group Policy Preferences in Windows Server 2008 Client Side Extensions.  I highly recommend you deploy this using WSUS or other software deployment mechanism to make sure they are deployed for all clients that need to “apply” preferences.  Especially if these preferences will be used to lock down security.  The way to use preferences to “lock down” a machine is to simply use it to change the settings to what you want them to be and then use Group Policy to prevent users from being able to change them.  (ie. change a registry key in preferences and then do not allow users access to the registry with policy).


Done.  Let’s see what it looks likeimage



Now that you have successfully installed the tools, you can open it up with the Group Policy Management Tools MMC snap-in which is located at Start\Control Panel\Administrative Tools\Group Policy Management Tools.  Expand your forest, expand domains, expand your domain name, expand group Policy Objects then Right-Click on one of the policies and select Edit.  This will bring up the Group Policy Management Editor.   You will now see preferences and be able to make changes to them.  


Your Feedback is appreciated


I have created a recording of these steps so you can see these steps in action. Please let me know what you think of this post.  If there are other topics you would like to see, please let me know.


Want The Click By Click Demo/Training on Installing Group Policy Preferences – Get it here!


Download it here! http://mschnlnine.vo.llnwd.net/d1/inetpub/danstolts/Installing_Group_Policy_Preferences_on_Windows_Server_2003_Domain_By_Dan_Stolts.wmv If you have a problem opening, try right clicking it and saving to your computer and then running it.  This is a short 9 minute video walk-through of the steps to install group policy preferences on a windows server 2003 domain using a windows vista workstation. I will put the video in a frame so you can stream it in the next couple of days so check back if you want to play it online instead of downloading it. 



Want More Help With Group Policy Preferences?


If you want to a walk-through on setting a preference check out Disable Adding USB Drive and Memory Sticks via Group Policy and Group Policy Preferences

Comments (9)

  1. TNJMAN says:

    GPP is very useful. Thanks for more in-depth insights into it.

  2. roeman says:

    Thanks Dan!

    I’ve actually been using this same setup in my environment to allow me to access the newer GP Preferences… I’m curious, though, if you believed prepping our 2003 DC’s for the 2008 schema is a more solid-approach than just trusting the ClientSideExtensions on our 2003 server. I’m looking at sites like: http://ts2blogs.com/blogs/rwagg/archive/2008/06/25/extend-your-server-2003-active-directory-schema-for-windows-vista-and-server-2008.aspx and http://technet.microsoft.com/en-us/library/cc771461.aspx

    Any thoughts?

  3. Frank Rizzo says:

    I currently have a domain similar to your example but the Group Policy enhancements simply dont work.  Group policy complaint with server 2003 does work.  Any ideas?  I have a server 2003 domain and a server 2008 R2 box.

  4. Lemuel Agana says:

    Hi,

    You said in your statement that you will show hot it works on 2033 Domain, but from your examples you used Vista and 2008 Server.???

    We have 2003 Server and XP clients SP3?

    —  Dan Stolts

    You have to have one Windows 7 or 2008/2008 R2 machine that you use to set the policy.  You can do it on a 2003 domain but you have to have a new OS to configure the Group Policy Preferences

  5. Allan says:

    Can windows 7 join my windows 2003 server domain?

    — YES!

  6. sgagne says:

    I can't get this to work.  I have a win2003 domain, a print queue that is on a Win2008 server, and windows 7 (and XP) workstations.  I have been able to push out the printers, but I can't get the default printer to set.  Not so concerned on the xp machines as those hold the default printer set in the profile.  But Windows 7 machines don't set a default printer… so programs default to MS XPS Document Writer.

    I have wasted a morning trying to get a default printer to set with no success!

  7. Parker McIntosh says:

    Great info, Dan, Thanks!

    This looks exactly like what i am looking for.  one question, when you said "you need to install the Group Policy Preferences in Windows Server 2008 Client Side Extensions," I was curious about clarification.  where am i getting this preference (IE created after you set up the GP?) and deployment for dummies would be great too!

  8. Parker McIntosh says:

    I guess to further clarify, I have been unable to locate similar client extensions for Windows 7 and was wondering if the Vista extensions would work or if there is another work around.

  9. show box says:

    Thanks for the great info. I really loved this. I would like to apprentice at the same time as you amend your web site, how could i subscribe for a blog site?
    For more info on showbox please refer below sites:
    http://showboxandroids.com/showbox-apk/
    http://showboxappandroid.com/
    Latest version of Showbox App download for all android smart phones and tablets.
    http://movieboxappdownloads.com/ – It’s just 2 MB file you can easily get it on your android device without much trouble. Showbox app was well designed application for android to watch movies and TV shows, Cartoons and many more such things on your smartphone.
    For showbox on iOS (iPhone/iPad), please read below articles:
    http://showboxappk.com/showbox-for-ipad-download/
    http://showboxappk.com/showbox-for-iphone/
    Showbox for PC articles:
    http://showboxandroids.com/showbox-for-pc/
    http://showboxappandroid.com/showbox-for-pc-download/
    http://showboxforpcs.com/
    There are countless for PC clients as it is essentially easy to understand, simple to introduce, gives continuous administration, effectively reasonable. it is accessible at completely free of expense i.e., there will be no establishment charges and after establishment
    it doesn’t charge cash for watching films and recordings.
    http://www.showboxforipad.org/showbox-apk/ Not simply watching, it likewise offers alternative to download recordings and motion pictures. The accompanying are the strides that are to be taken after to introduce Showbox application on Android. The above
    all else thing to be done is, go to the Security Settings on your Android telephone, Scroll down and tap on ‘Obscure sources’.
    http://www.showboxforipad.org/
    http://movieboxappdownloads.com/moviebox-apk-android/
    http://movieboxappdownloads.com/download-moviebox-pc/
    Movie Box, an esteemed movies application in which you can find stacks of programs and films. The guide is given here to download Movie Box app to Android and to Apple iOS 9.0.2, iOS 8.4/8.3 and also for the lower versions without Jailbreak.
    http://showboxforiphone.org/
    Please do login to Showbox application with the help of Ymail. You can login in Ymail from here –
    http://ymaillogintips.com/
    Sign Up & Do registration for latest movies on Showbox application