I would think, if in a given GPO you enable policies that aren't seen under 2003/XP, then you shouldn't try to modify that policy under 2003/XP ever again.
Carl From: Jon Harris [mailto:[email protected]] Sent: Tuesday, September 01, 2009 3:04 PM To: NT System Admin Issues Subject: Re: Windows 7 in 2003 domain I don't know if it is still the case but I have seen that behavior. We no longer allow changes to GPO's except by way of RSAT from either a Vista or Windows 7 machine. The fix was to just open the "problem" GPO from a Windows 7 or Vista box verify that what was changed was correct and then closed the GPO. Jon On Tue, Sep 1, 2009 at 2:35 PM, Joseph L. Casale <[email protected]> wrote: Carl, I recall some early ramifications of opening a GPO on the Vista/Win7 box, followed by opening them on the server or anything else <Vista/Win7? Is that still the case? jlc From: Carl Houseman [mailto:[email protected]] Sent: Tuesday, September 01, 2009 9:40 AM To: NT System Admin Issues Subject: RE: Windows 7 in 2003 domain Install the RSAT tools on a Windows 7 or Vista desktop and manage GP's from there. A 2008 DC/domain is not required. Carl From: David Lum [mailto:[email protected]] Sent: Tuesday, September 01, 2009 11:03 AM To: NT System Admin Issues Subject: Windows 7 in 2003 domain My Google-Fu is failing me. Windows 7 in a 2003 AD forest, is there some snap-in to allow 2003 DC's to configure the additional group policies available in Vista and Windows 7, or is a 2008 DC / domain required? David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
