Healthcare Desktop GPO Templates for GPMC v2

Transcription

1 Healthcare Desktop GPO Templates for GPMC v2 Release Notes Prepared by Microsoft First published 27 September 2007

2 Copyright This document and/or software ( this Content ) has been created in partnership with the National Health Service (NHS) in England. Intellectual Property Rights to this Content are jointly owned by Microsoft and the NHS in England, although both Microsoft and the NHS are entitled to independently exercise their rights of ownership. Microsoft acknowledges the contribution of the NHS in England through their Common User Interface programme to this Content. Readers are referred to for further information on the NHS CUI Programme. All trademarks are the property of their respective companies. Microsoft and Windows are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Microsoft Corporation and Crown Copyright 2007 Disclaimer At the time of writing this document, Web sites are referenced using active hyperlinks to the correct Web page. Due to the dynamic nature of Web sites, in time, these links may become invalid. Microsoft is not responsible for the content of external Internet sites. The example companies, organisations, products, domain names, addresses, logos, people, places, and events depicted herein are fictitious. No association with any real company, organisation, product, domain name, address, logo, person, places, or events is intended or should be inferred. Page ii

3 INTRODUCTION This document contains Release Notes for the Healthcare Desktop GPO Templates for GPMC v2 Group Policy Templates. The Group Policy Templates should be used in conjunction with the guidance contained in Group Policy for Healthcare Desktop Management. Important All information in this document refers to Group Policy Templates build number produced by Microsoft on 05-Sep The Healthcare Desktop GPO Templates are for use with Group Policy Management Console (GPMC) version 2 as available in Windows Vista. Deliverables This Deliverable comprises: A compressed (.zip) file Healthcare Desktop GPO Templates for GPMC v2.zip containing: Prerequisites 20 folders, each containing a Group Policy Template A manifest.xml file, used by the Group Policy Backup/Import Wizard An installer for Group Policy ADM files, admfiles_windowsxpsp2.msi, which has been used as an example in the Software Installs template. This is not essential for deploying this Deliverable The minimum hardware and software requirements for using the Group Policy Templates are: A Windows Vista workstation for the use of GPMC version 2 Installation To install the Group Policy Templates: 1. Right-click the Healthcare Desktop GPO Templates for GPMC v2.zip file and select Extract All. The Extract Compressed (Zipped) Folders dialog box opens with the Select a Destination screen displayed. 2. In the Files will be extracted to this folder: field, type the name of the folder you want to extract the files to, and click Extract. (This location should be accessible from where the import operation will be carried out.) The files will be extracted and once complete, the Extract Compressed (Zipped) Folders dialog box will close automatically. 3. The Group Policy Templates can now be imported using the Import Settings Wizard within the GPMC. Appropriately name each GPO that is being imported, using Table 1 as an example. For details on how to import a GPO, please refer to Appendix B - How To Guides in the document Group Policy for Healthcare Desktop Management. Backup Name Baseline Computer Recommended Settings Baseline User Recommended Settings Imported Name Baseline Computer Baseline User GPO BB Blocking Internet Explorer 7 Incremental Computer Blocking Internet Explorer 7 GPO BB GPO Administration Incremental GPO Administration Page 1

4 Backup Name GPO BB Internet Explorer GPO BB Look and Feel GPO BB Redirected Folders GPO BB Security Hardening GPO BB Software Installs GPO BB Software Restriction GPO BB WSUS Imported Name Incremental User Internet Explorer Incremental User Look and Feel Incremental User Redirected Folders Incremental Computer Security Hardening Incremental Computer Software Installs Incremental Computer Software Restriction Incremental Computer WSUS GPO BB Office2003 Computer Incremental Computer Office 2003 GPO BB Office2003 User Incremental User Office 2003 GPO BB Office2007 User Incremental User Office 2007 GPO BB Vista Removable Storage Device Installation GPO BB Vista Removable Storage Device Access GPO BB Vista Power Management GPO BB Vista BitLocker and TPM Incremental Computer Public Cybercafe PC Incremental User Public Cybercafe PC Incremental User Removable Storage Device Installation Incremental User Removable Storage Device Access Incremental Computer Power Management Incremental Computer BitLocker and TPM Incremental Computer Public Cybercafe PC Incremental User Public Cybercafe PC Table 1: Example Naming Convention for GPOs 4. Whilst importing the Group Policy Templates, any GPOs containing a reference to a UNC path or security principal may require a migration table. To create a migration table: a. At the Migrating References screen during the Import Settings Wizard, select the Using this migration table to map them in the destination GPO: option. b. Click New. c. The Migration Table Editor displays, click Tools > Populate from Backup. d. The Select Backup window displays, select the GPO that you are importing from the Backed up GPOs: list box and click OK. e. The Migration Table Editor displays, populated with entries requiring migration. Amend the Destination Name appropriately. f. Click File > Save As, enter a path and filename for the migration table, and click Save. g. Close the Migration Table Editor to be returned to the Import Settings Wizard screen. 5. Once each GPO has been imported, the GPO can be linked to an appropriate Organisational Unit. For details on how to link an existing GPO, please refer to Appendix B - How To Guides in the document Group Policy for Healthcare Desktop Management. Uninstallation To uninstall the Group Policy Templates: 1. Using Windows Explorer, locate the folder used to extract the Healthcare Desktop GPO Templates for GPMC v2.zip file in to. Right-click this folder and click Delete. 2. If prompted with a Confirm Folder Delete dialog box, click Yes. Page 2

5 3. To delete the Group Policy Objects imported into the Group Policy Management Console, open the GPMC by clicking the Windows Start button and click Run. 4. In the Run dialog box, type GPMC.MSC and click OK. 5. Click the Group Policy Objects container in the left-hand pane of the GPMC, all GPOs will be displayed in the right-hand pane. 6. Select the GPOs to be deleted, (multiple GPOs can be selected at once by using the CTRL key whilst clicking the GPOs), and press the DELETE key. 7. In the Group Policy Management confirmation dialog box, click OK to confirm that you wish to delete the selected GPOs and all links to them. 8. A Delete dialog box showing the Delete Progress and Status displays, click OK once complete. Page 3

6 KNOWN ISSUES Title and Description Incompatibility between GPMCv1 and GPMCv2 backups Group Policy Objects backed up using GPMCv1 cannot be imported using GPMCv2 as provided with Windows Vista. This issue is documented in Group Policy for Healthcare Desktop Management. Some group policies can require two logons to be fully applied Some Group Policy Templates are not fully implemented until the user logs on for a second time, such as, the software install building block and the cyber cafe user template. This issue is documented in Group Policy for Healthcare Desktop Management. Severity Ref Major 5437 Major 2095 Page 4