We’re on to a step in the migration of Essentials that I think you might want to keep some of these group policies around. 

Sure nuke the logon scripts if you haven’t already.  But if you WANT to borrow that group policy from the old SBS 2003 and keep such things as the firewall settings, I’d say keep them. 

You can remove the items that are WSUS policies (assuming you migrated from an R2 box that has WSUS mind you)

 

Remove legacy logon settings and active Directory Group Policy objects

Note

These are optional tasks.

Remove old logon scripts

Windows SBS 2003 uses logon scripts for tasks such as installing software and customizing desktops. In Windows SBS 2011 Essentials, the Windows SBS 2003 logon scripts are replaced with a combination of logon scripts and Group Policy objects.

Note

If you modified the Windows SBS 2003 logon scripts, you should rename the scripts to preserve your customizations.

Note

Windows SBS 2003 logon scripts apply only to user accounts that were added by using the Add New Users Wizard.

To remove the Windows SBS 2003 logon scripts

1.   On the Migration Wizard Home page, click Remove legacy group policies and logon settings, and then click Next.

2.   Log on to the Source Server with an administrator account and password.

3.   On the Source Server, click Start, and then click Run.

4.   Type \\localhost\sysvol\<YourNetworkDomainName>.local\scripts, and then press ENTER.

5.   Delete or rename SBS_LOGIN_SCRIPT.bat.

After you delete the old logon scripts, use the following procedure to verify that all users’ profiles are updated to not use a logon script:

To verify user profiles

1.   On the Source Server, click Start, click Administrative Tools, and then click Active Directory Users and Computers.

2.   In the navigation pane, expand <YourNetworkDomainName>, expand My Business, expand Users, and then expand SBSUsers.

3.   Select all the user accounts, right-click the highlighted user accounts, and then click Properties.

4.   On the Profile tab, select the logon script check box, clear the text field, and then click Apply.

5.   Close Active Directory Users and Computers.

Remove legacy Active Directory Group Policy objects

The Group Policy objects (GPOs) are updated for Windows SBS 2011 Essentials. They are a superset of the Windows SBS 2003 GPOs. For Windows SBS 2011 Essentials, a number of the Windows SBS 2003 GPOs and WMI filters have to be manually deleted to prevent conflicts with the Windows SBS 2011 Essentials GPOs and WMI filters.

Note

If you modified the original Windows SBS 2003 Group Policy objects, you should save copies of them in a different location, and then delete them from Windows SBS 2003.

To remove old Group Policy objects from Windows SBS 2003

1.   Log on to the Source Server with an administrator account.

2.   Click Start, and then click Server Management.

3.   In the navigation pane, click Advanced Management, click Group Policy Management, and then click Forest: <YourDomainName>.

4.   Click Domains, click <YourDomainName>, and then click Group Policy Objects.

5.   Right-click Small Business Server Auditing Policy, click Delete, and then click OK.

6.   Repeat step 5 to delete the following GPOs that apply to your network:

·      Small Business Server Client Computer

·      Small Business Server Domain Password Policy

We recommend you configure the password policy in Windows SBS 2011 Essentials to enforce strong passwords. To configure the password policy, use the Dashboard, which writes the configuration to the default domain policy. The password policy configuration is not written to the Small Business Server Domain Password Policy object, like it was in Windows SBS 2003.

·      Small Business Server Internet Connection Firewall

·      Small Business Server Lockout Policy

·      Small Business Server Remote Assistance Policy

·      Small Business Server Windows Firewall

·      Small Business Server Windows Vista Policy

·      Small Business Server Update services Client Computer Policy

·      Small Business Server Update Services Common Settings Policy

·      Small Business Server Update Services Server Computer Policy

7.   Confirm that all of the GPOs are deleted.

To remove WMI filters from Windows SBS 2003

1.   Log on to the Source Server with an administrator account.

2.   Click Start, and then click Server Management.

3.   In the navigation pane, click Advanced Management, click Group Policy Management, and then click Forest: <YourNetworkDomainName>

4.   Click Domains, click <YourNetworkDomainName>, and then click WMI Filters.

5.   Right-click PostSP2, click Delete, and then click Yes.

6.   Right-click PreSP2, click Delete, and then click Yes.

7.   Right-click Vista, click Delete, and then click Yes.

8.   Confirm that these three WMI filters are deleted.

 

Comments are closed.