Windows7 Starter GPOs?
We are currently looking to deploy Windows 7 to the desktops, and in preperation have upgraded our schema and DCs to Server 2008r2.I am about to create our first user group policy, and read some interesting information about the Starter GPOs included with R2. However, I was surprised to find that there isnt any starter GPOs for Windows 7. Can anyone tell me if these are available as a seperate download?Many thanks
February 1st, 2010 6:27pm

Hi The following quote is from this article. Windows 7: What’s New in Group Policy for Windows 7 and Windows Server 2008 R2 The Big In-the-Box Addition: Built-in Starter GPOs The ability to create and use Starter GPOs first became available in the Vista version of the GPMC. The idea behind a Starter GPO is that an administrator can create a starting point for other administrators to use when creating their GPOs. The fundamental architecture and functionality hasn't changed much in this new update, but one new distinction is notable. Specifically, when you use a Windows 7 or Windows Server 2008 R2 machine to create the Starter GPO's container, the container is automatically populated with some built-in Starter GPOs. These Starter GPOs follow Microsoft best practices and map to the Windows Server 2008 Security Guide. For example, one of these built-in Starter GPOs is for an average Enterprise Client (EC) and another, with a more locked-down approach, is called Specialized Security Limited Functionality (SSLF). Windows 7 and Windows Server 2008 R2 include Starter GPOs for both the user and computer sides. These Microsoft-created Starter GPOs are also available (in slightly older form) for Vista and Windows XP SP2.Hope this helps. Thank You for using Windows 7 Ronnie Vernon MVP
Free Windows Admin Tool Kit Click here and download it now
February 1st, 2010 8:20pm

I have already gone through the steps in the auoted article to create the starter GPOs. However, none of the starter GPOs are entitles "Windows 7", they are all XP, Vista or Windows Server 2008?
February 2nd, 2010 9:56am

I have the same exact question. No "Windows 7" starters. I understand Vista is under the hood but I can't believe all of the new frillies are in the "Vista" starters.
Free Windows Admin Tool Kit Click here and download it now
February 4th, 2010 6:24pm

HiThe way I understand it is that the mantra with Group Policy in Windows 7 was more on enhancing the current interface and policies. Better documentation and descriptions, expanding the current settings for many of the supported technologies and enhancements, such as including the Starter GPOs. There have been more than 300 Administrative template policy settings added or changed. To learn which specific policy settings were added or changed for the technologies, you can review the appropriate technology-specific topics, such as Bitlocker, BitLocker To Go, the updated Taskbar, Remote Desktop Services (Terminal Services), BranchCache, Windows Remote Management, Power Configuration Settings, etc. Download the following file for documentation about many of the specifics. What's New for IT Pros in Windows 7 Release Candidate - Windows 7 What is New Guide In the following article, MVP Jeremy Moskowitz also gives an overview of many of these changes. What’s New in Group Policy for Windows 7 and Windows Server 2008 R2 Hope this helps. Thank You for using Windows 7 Ronnie Vernon MVP
February 8th, 2010 2:24pm

I'm also interested in the answer to this thread - are there starter GPO templates for Windows 7 or does Microsoft recommend using the Vista templates? Thanks, Guy
Free Windows Admin Tool Kit Click here and download it now
February 25th, 2010 7:49pm

So I clicked on the "Starter GPO" folder in my Windows Server 2008 R2 GPMC and it populated with Windows Vista and Windows XP starter GPOs. I see no Windows Server 2008 and Windows 7 Starter GPOs. The documentation links provided by Ronnie Vernon are useful, but do not answer the question everyone in this post is asking; if you don't have the Starter GPOs in the GPMC for Windows Server 2008 and Windows 7, where can you download them? OR, if you don't need to download them anymore, why aren't they showing in our Windows Server 2008 GPMC?
March 10th, 2010 12:18am

I've been watching this thread. Can we get an answer on this MVP community? Is there an expected time of release? Are we missing something simple? I hate to sound jaded but Windows 7 "Features" and GPO stuff is supposed to be a big benefit of the 2008 R2 and Win 7 synergy. Where are the starters?! Respectfully, Mike
Free Windows Admin Tool Kit Click here and download it now
March 25th, 2010 3:05pm

Re. ....the mantra with Group Policy in Windows 7 was more on enhancing the current interface and policies. Better documentation and descriptions, expanding the current settings for many of the supported technologies and enhancements, such as including the Starter GPOs. Wow - this must be the longest mantra I have ever encountered. Try as I might, repeating it ad-infinitum did not unfortunately elevate me to a higher plane. Perhaps it is not a mantra at all? On a more serious note, I have no idea why one cannot get a YES/NO answer to the question: "Are there any Starter GPOs specifically aimed at (and therefore entitled) Windows 7 ?" (eg 'Windows 7 EC Computer') We simply need a Microsofty to state something along the lines of: "Not yet but all settings in the Starter GPOs with 'Vista' in their name are relevant to Windows 7 and GPOs with the extra settings for Windows 7 will be available by August" or "Yes here is the URL for Windows 7 Starter GPOs" Unless Microsoft is trying to teach us the meaning of the word 'prevarication', I have not the slightest idea why a simple answer is not forthcoming! Regards to all, Frustrated of London
July 9th, 2010 7:44pm

Hi Alan Another definition of Mantra is "An often repeated word or phrase" which was the context in which it was used in that post. J Please go to this link that I posted earlier. What's New for IT Pros in Windows 7 Release Candidate - Windows 7 What is New Guide Start on page 16 and use the links provided there. Also, take a look at these articles. Starter Group Policy Objects for Windows and Server 2008 R2 Administrative Template Settings If your asking if there is a published list of the specific new GPO's for Windows 7 then my answer would be that I have not seen any. You can also download the following GP Reference spreadsheet. There is a "Supported On" column in that file. Look for the GPO's desinated "At least Windows 7 or Windows Server 2008 R2". Group Policy Settings Reference Here are more resources: The Group Policy Team Blog Group Policy Answers If you still have more questions, please post them in our Group Policy Forum. Technet Group Policy Forum Hope this helps. Thank You for using Windows 7 Ronnie Vernon MVP
Free Windows Admin Tool Kit Click here and download it now
July 9th, 2010 11:17pm

Many thanks Ronnie, I shall peruse the content you suggest. You're most helpful. Alan
July 12th, 2010 8:57pm

I still don't see the question answered directly. Ive gone through the articles and yes they are saying the Windows 7 Starter GPOs are built in... but... where are they? They are not available as a separate download now they are available in RSAT.... is the question just being evaded?
Free Windows Admin Tool Kit Click here and download it now
November 29th, 2010 5:42am

Microsoft released a new generation of security templates for Windows7, Server 2008 R2 and previous versions of Windows on November 12, 2009 with the latest edition of its Security Compliance Management Toolkit Series. Included in the Toolkit are template files for Windows 7 as an Enterprise Client in an average network, and templates that are suitable for high security classified networks called Specialized Security – Limited Functionality (SSLF).
December 4th, 2010 5:21pm

Microsoft released a new generation of security templates for Windows7, Server 2008 R2 and previous versions of Windows on November 12, 2009 with the latest edition of its Security Compliance Management Toolkit Series. Included in the Toolkit are template files for Windows 7 as an Enterprise Client in an average network, and templates that are suitable for high security classified networks called Specialized Security – Limited Functionality (SSLF). Dissappointly, there is no way to create Windows 7 or Windows 2008 R2 Starter GPOs from the SCM. You can create an empty GPO, import the settings taken from the SCM to get a GPO with those settings, but if you want a Starter GPO for Windows 7/W2K8, you'll need to manually copy the settings laid out in SCM in to it. I have no idea why the SCM tool can't export a cab file to create a Starter GPO. The naming standards are the same as those which come when you create the Vista an XPSP2 Starter GPOs. Because of how difficult it is to get them, i have completely given up on Starter GPOs and have just imported the settings into an empty GPO to use them. Amazed as to how hard it was to get to this conclusion as everything I had read said you could get them from the SCM. You can't, and actually, why bother. I just saw it was a nicety if it could be done but it can't.
Free Windows Admin Tool Kit Click here and download it now
May 2nd, 2011 2:06am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics