MDT 2012: New Features– GPO Packs

re: MDT 2012: New Features– GPO Packs

Alin Grecea — Wed, 23 Jan 2013 14:05:46 GMT

I have a problem. The default Microsoft baseline GPO security kills port 139. Does anyone know how to revert all the extra settings the default baseline security adds?

I tried reverting back by taking the GPO from a fresh DVD install on windows 7 and nothing. So would love to hear some good news from the deployment experts.

Please enlighten me on this one, cuz I'm fresh out of options.

re: MDT 2012: New Features– GPO Packs

Venkat Raghavan Sundararaj — Tue, 22 Jan 2013 23:57:47 GMT

Now that SCM 3.0 Beta released we can use it for Windows 8 . I just wrote a tweak to fix that in MDT2012 for Windows 8. blogs.technet.com/.../3547682.aspx

re: MDT 2012: New Features– GPO Packs

KBFTW — Sat, 08 Dec 2012 01:51:56 GMT

Actually, I just now got it working. It has everything to do with secedit not wanting to run templates from a remote location (UNC path). I copied everything down to the local machine with a cmd (this is all during a TS), including the folder with the GPO pack that I made, then ran GPOPack.wsf locally with a simple cscript command-line. It seems like everything applied this time.

This link was INCREDIBLY helpful and detailed:

blogs.technet.com/.../scm-v2-beta-localgpo-rocks.aspx

re: MDT 2012: New Features– GPO Packs

Ben Hunter — Sat, 08 Dec 2012 00:58:13 GMT

Hi Catharsis,

I don't really have any more guidance to offer, however I would definitely recommend that you post the question to the Microsoft forum for the LocalGPO tool, there are lots of experts who manage the forum - social.technet.microsoft.com/.../threads

Thanks,

Ben

re: MDT 2012: New Features– GPO Packs

KBFTW — Fri, 07 Dec 2012 23:41:01 GMT

Because I'm not applying this on a domain-joined machine, does that have something to do with it? I have been reading some on the LocalGPO tool, and I think maybe that's what I have to use. But it sounds like I have to install it on every single machine. That's totally impractical. The point is that it would be applied during/at the end of deployment.

Starting Monday I will be spending two weeks imaging about 700 computers. I really wish I had the answer to this question now to save our technicians time during the next three weeks.

re: MDT 2012: New Features– GPO Packs

KBFTW — Fri, 07 Dec 2012 21:29:32 GMT

I'm creating it in SCM. I duplicated the baseline Win7 one, emptied it, and added in what I need for our requirements. There is a mix of User Rights Assignments, Security Options, Auditing, etc. Only USR gets applied.

re: MDT 2012: New Features– GPO Packs

Ben Hunter — Tue, 04 Dec 2012 23:16:36 GMT

Hi Catharsis,

How exactly are you creating and capturing your own GPO's? The error shouldn't be in the GPO Pack application process so maybe it is caused by how you are capturing the GPO.

Thanks,

Ben

re: MDT 2012: New Features– GPO Packs

KBFTW — Tue, 04 Dec 2012 16:55:24 GMT

I'm creating my own.

re: MDT 2012: New Features– GPO Packs

Ben Hunter — Mon, 03 Dec 2012 23:54:22 GMT

Hi Catharsis,

Unfortunately don't have a suggestion as to what could be causing this issue. Are you using the GPO packs that came with MDT or are you creating your own GPOPack?

Thanks,

Ben

re: MDT 2012: New Features– GPO Packs

KBFTW — Mon, 03 Dec 2012 22:23:01 GMT

I'm revisiting this six months later, but I'm having the exact same problems as before: It only applies User Rights Assignment settings and nothing else. Any ideas anyone? *silence*