RE: Windows domains and group policy

I think I need to go to one of those seminars...

1)  A co-worker as 2003 server running at home and says it works like a
dream, makes reformatting a system a snap.  Just attach to the web interface
and tell it what user will be using the system.

2)  Domain security works well, just make sure you set it up right ;-)  We
try to assign access to groups (even if it is a group of one) so that when a
user leaves the new user just needs to be added to the groups.

Can't speak to the rest, still running 200 server.

Doug

-----Original Message-----
From: Jeff Crosby [mailto:jlcrosby@xxxxxxxxxxxxxxxx]
Sent: Wednesday, June 22, 2005 1:34 PM
To: 'PC Technical Discussion for iSeries Users'
Subject: [PCTECH] Windows domains and group policy


I went to a 1-day seminar Monday on Windows 2003 Server that really opened
my eyes.

I saw what is possible from a security and management viewpoint when you PCs
are a DOMAIN instead of a WORKGROUP.

The security, software deployment, shadow copying, redirection,
Intellimirror, etc. were very interesting and all require domain.

I'm trying to formulate in my mind what this could do for us if fully
implemented and have questions.

1) Does the software deployment and security stuff work as well as
advertised?

2) How much of a pain was it going from workgroups to a domain?

3) W98 and NT cannot participate.  If we still have 4 W98 and 1 NT 4.0, what
does that do to us?  Do we still need a WINS?

4) Did you get outside help?

5) How much outside training was required?

6) Was it worth it?

The whole shebang does not appear to be for the faint of heart, but anything
to help admin cost is wonderful to me.

Thanks.