Group Policy Templates Release Notes
Prepared by Microsoft Version 1.0.0.0 Baseline
First published 22 March 2007
Prepared by Microsoft
Copyright This document and/or software (“this Content”) has been created in partnership with the National Health Service (NHS) in England. Intellectual Property Rights to this Content are jointly owned by Microsoft and the NHS in England, although both Microsoft and the NHS are entitled to independently exercise their rights of ownership. Microsoft acknowledges the contribution of the NHS in England through their Common User Interface programme to this Content. Readers are referred to www.cui.nhs.uk for further information on the NHS CUI Programme. All trademarks are the property of their respective companies. Microsoft and Windows are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. © Microsoft Corporation and Crown Copyright 2007
Disclaimer At the time of writing this document, Web sites are referenced using active hyperlinks to the correct Web page. Due to the dynamic nature of Web sites, in time, these links may become invalid. Microsoft is not responsible for the content of external Internet sites. The example companies, organisations, products, domain names, e-mail addresses, logos, people, places, and events depicted herein are fictitious. No association with any real company, organisation, product, domain name, e-mail address, logo, person, places, or events is intended or should be inferred.
Page ii Group Policy Templates – Release Notes Version 1.0.0.0 Baseline
Prepared by Microsoft
INTRODUCTION This document contains Release Notes for the Group Policy Templates. The Group Policy Templates should be used in conjunction with the guidance contained in Group Policy for Healthcare Desktop Management. Important All information in this document refers to Group Policy Templates build number 1.0.061013.000 produced by Microsoft on 13-Oct-2006.
Deliverables This Deliverable comprises: A compressed (.zip) file Healthcare Desktop GPO Templates.zip containing:
13 folders, each containing a Group Policy Template
A manifest .xml file, used by the Group Policy backup/import wizard
An installer for Group Policy ADM files, admFiles_WindowsXPSP2.msi, which has been used as an example in the Software Installs template. This is not essential for deploying this Deliverable
Prerequisites The minimum hardware and software requirements for using the Group Policy Templates are: Either, Windows Server® 2003 Or, Windows 2000 Server with access to a Windows® XP SP2 workstation for the use of the Group Policy Management Console
Installation To install the Group Policy Templates: 1. Right-click the Healthcare Desktop GPO Templates.zip file and select Extract All…. 2. The Extraction Wizard Welcome screen will display, click Next. 3. The Select a Destination screen will be displayed, in the Files will be extracted to this directory: field, type the name of the folder you want to extract the files to, and click Next. (This location should be accessible from where the import operation will be carried out). 4. The files will be extracted and the Extraction Complete screen will display, click Finish 5. The Group Policy Templates can now be imported using the Import Settings Wizard within the Group Policy Management Console. Name each GPO being imported appropriately, using Table 1 as an example. For details on how to import a GPO, please refer to Appendix B - How To Guides in the document Group Policy for Healthcare Desktop Management.
Backup Name
Imported Name
Baseline Computer Recommended Settings
Baseline Computer
Baseline User Recommended Settings
Baseline User
GPO BB Blocking Internet Explorer 7
Incremental Computer Blocking Internet Explorer 7
Page 1 Group Policy Templates – Release Notes Version 1.0.0.0 Baseline
Prepared by Microsoft
Backup Name
Imported Name
GPO BB GPO Administration
Incremental GPO Administration
GPO BB Internet Explorer
Incremental User Internet Explorer
GPO BB Look and Feel
Incremental User Look and Feel
GPO BB Redirected Folders
Incremental User Redirected Folders
GPO BB Security Hardening
Incremental Computer Security Hardening
GPO BB Software Installs
Incremental Computer Software Installs
GPO BB Software Restriction
Incremental Computer Software Restriction
GPO BB WSUS
Incremental Computer WSUS
Incremental Computer Public Cybercafe PC
Incremental Computer Public Cybercafe PC
Incremental User Public Cybercafe PC
Incremental User Public Cybercafe PC
Table 1: Example Naming Convention for GPOs
6. Whilst importing the Group Policy Templates, the GPOs containing a reference to a UNC path or security principal may require a migration table. a. At the Migrating References screen during the Import Settings Wizard, select Using this migration table to map them in the destination GPO: option. b. Click New. c. The Migration Table Editor will display, click Tools > Populate from Backup. d. The Select Backup window will display, select the GPO that you are importing from the Backed up GPOs: list box and click OK. e. The Migration Table Editor will display, populated with entries requiring migration. Amend the Destination Name appropriately. f.
Click File > Save As, enter a path and filename for the migration table, and click Save.
g. Close the Migration Table Editor to be returned to the Import Settings Wizard screen. 7. Once each GPO has been imported, the GPO can be linked to an appropriate Organisational Unit. For details on how to link an existing GPO, please refer to Appendix B - How To Guides in the document Group Policy for Healthcare Desktop Management.
Uninstallation To uninstall the Group Policy Templates: 1. Using Windows Explorer, locate the folder used to extract the Group Policy for Healthcare Desktop Management Templates.zip file to. Right-click this folder and click Delete. 2. If prompted with a Confirm Folder Delete dialog box, click Yes. 3. To delete the Group Policy Objects imported into the Group Policy Management Console, open the GPMC located, by default on a Windows Server 2003 server, in Start > All Programs > Administrative Tools. 4. Click the Group Policy Objects container in the left hand pane of the GPMC, all GPOs will be displayed in the right hand pane. 5. Select the GPOs to be deleted, (multiple GPOs can be selected at once by using the Ctrl key whilst clicking the GPOs), and press the Delete key. Page 2 Group Policy Templates – Release Notes Version 1.0.0.0 Baseline
Prepared by Microsoft
6. A Group Policy Management dialog box will be displayed asking for you to confirm that you wish to delete the selected GPOs and all links to them, click OK. 7. A Delete dialog box displaying the Delete Progress and Status will be displayed, click OK once complete.
Page 3 Group Policy Templates – Release Notes Version 1.0.0.0 Baseline
Prepared by Microsoft
KNOWN ISSUES Title and Description
Severity Ref
Some group policies can require two logons to be fully applied
Major
2095
Some group policy templates are not fully implemented until the user logs on for a second time, such as the software install building block and the cyber cafe user template. This issue is documented in Group Policy for Healthcare Desktop Management.
Page 4 Group Policy Templates – Release Notes Version 1.0.0.0 Baseline
