Lock them down until the scream then back off a little at a time until the screaming stops.
But seriously we go with your gut feeling. The only thing we customize is the default user profile so their initial desktop experience is what we want for them...after that it is all handled via GPO's or scripts. From: Steven M. Caesare [mailto:[email protected]] Sent: Monday, March 21, 2011 2:01 PM To: NT System Admin Issues Subject: RE: Win 7 configuration options? Awesome, thanks WJR. Next question... how do folks define what they want in their organizations? Do you go through this ginormous document? Do you just decide on SOME things you want to do initially (redirect default save locations, etc...), and then refine over time? How do you go about deciding settings things that _AREN'T_ managed via GPO? My gut and initial reading seems to reinforce the idea that I want' very little customization in the image itself... just the OS and necessary drivers.. with just the things I cannot manage via GPO. After that we'll layer apps on as individual packages. Is that how you folks are addressing client lifecycle configuration and management? Thanks. -sc From: William Robbins [mailto:[email protected]] Sent: Monday, March 21, 2011 1:52 PM To: NT System Admin Issues Subject: Re: Win 7 configuration options? Lest I be thought completely useless: Group Policy Settings Reference for Windows and Windows Server http://www.microsoft.com/downloads/en/details.aspx?FamilyID=18c90c80-8b0a-4906-a4f5-ff24cc2030fb&displaylang=en - WJR On Mon, Mar 21, 2011 at 12:32, Steven M. Caesare <[email protected]<mailto:[email protected]>> wrote: So... I'm being pulled in to a Windows 7 rollout project that previously has had very little adult supervision... and as such needs to have several parts of it rebooted. We need to quickly do some work to define what configuration options we want in the base image we are going to deploy. The obvious goal is to manage as much via GPO as possible... but not everything is GPO-manageable (power setting, etc...?). Regardless as to if the setting is set via GPO, it still needs to be decided upon. So my question is: Other than paging through the GPO MMC snapin and looking at each setting, is there good comprehensive doc that lists everything out that we can use as the basis for discussion? If this does exist, does it cover all the things not managed via GPO as well? Thanks. -sc ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
