Step 32 – removing old group policy items.

The Group Policy objects (GPOs) are updated for Windows SBS 2011 Standard. They are a superset of the Windows SBS 2003 GPOs. For Windows SBS 2011 Standard, a number of the Windows SBS 2003 GPOs and WMI filters have to be manually deleted to prevent conflicts with the Windows SBS 2011 Standard GPOs and WMI filters.


Note


If you modified the original Windows SBS 2003 Group Policy objects, you should save copies of them in a different location, and then delete them from Windows SBS 2003.


To remove old Group Policy objects from Windows SBS 2003


1.   Log on to the Source Server with an administrator account.

2.   Click Start, and then click Server Management.

3.   In the navigation pane, click Advanced Management, click Group Policy Management, and then click Forest: <YourDomainName>.

4.   Click Domains, click <YourDomainName>, and then click Group Policy Objects.

5.   Right-click Small Business Server Auditing Policy, click Delete, and then click OK.

6.   Repeat step 5 to delete the following GPOs that apply to your installation:

·      Small Business Server Client Computer

·      Small Business Server Domain Password Policy

BEFORE YOU DELETE THIS ONE, TAKE THE TIME TO DISCUSS THE PASSWORD POLICY WITH THE BOSS AND DESIGN A GOOD ONE — consider two factor authentication like www.authanvil.com if you need stronger authentication.

We recommend you configure the password policy in Windows SBS 2011 Standard to enforce strong passwords. To configure the password policy, use the Windows SBS Console, which writes the configuration to the default domain policy. The password policy configuration is not written to the Small Business Server Domain Password Policy object, like it was in Windows SBS 2003. If you want to keep your Windows SBS 2003 password policies, follow the instructions in the next procedure, To keep the Windows SBS 2003 password policy before you delete the Small Business Server Domain Password Policy.

·      Small Business Server Internet Connection Firewall

·      Small Business Server Lockout Policy

·      Small Business Server Remote Assistance Policy

·      Small Business Server Windows Firewall

·      Small Business Server Windows Vista Policy

Now this last section watch that you are deleting the exact named policies and not the newly inserted WSUS policies that the new server built.

·      Small Business Server Update services Client Computer Policy

·      Small Business Server Update Services Common Settings Policy

·      Small Business Server Update Services Server Computer Policy

I have the Mac patching policy… you may not have one of those :-)

7.   Confirm that all of the GPOs are deleted.


To keep the Windows SBS 2003 password policy


1.   In the Windows SBS 2011 Standard Console, on the navigation bar, click the Users and Groups tab, and then click Users.

2.   In the Tasks pane, click Change password policies.

3.   Change the password policy to match the Windows SBS 2003 password policy, and then click OK.

4.   Delete the Small Business Server Domain Password Group Policy object.


To remove WMI filters from Windows SBS 2003


1.   Log on to the Source Server with an administrator account.

2.   Click Start, and then click Server Management.

3.   In the navigation pane, click Advanced Management, click Group Policy Management, and then click Forest: <YourNetworkDomainName>

4.   Click Domains, click <YourNetworkDomainName>, and then click WMI Filters.

5.   Right-click PostSP2, click Delete, and then click Yes.

6.   Right-click PreSP2, click Delete, and then click Yes.

7.   Confirm that these two WMI filters are deleted.

8.   When you finish deleting the old logon scripts, old Group Policy objects, and WMI folders, return to the Migration Wizard on the Destination Server, click Task Complete on the Remove legacy group policies and logon settings page, and then click Next.

Comments are closed.

Post Navigation