Anonymous_User Absent Member.
Absent Member.
249 views

Policy (GPO) from Novell products?


Dear All,

I am using Windows 8.1 Core, it doesn't have join-domain-function. I
need to apply some policies to these workstations, without join domain.
Is there a GPO set in eDirectory, or any solution from Novell products
for policies?

Thanks in advance.


--
tkmanh
------------------------------------------------------------------------
tkmanh's Profile: https://forums.netiq.com/member.php?userid=6774
View this thread: https://forums.netiq.com/showthread.php?t=49937

Labels (1)
0 Likes
9 Replies
Anonymous_User Absent Member.
Absent Member.

Re: Policy (GPO) from Novell products?

tkmanh wrote:

> I am using Windows 8.1 Core, it doesn't have join-domain-function. I
> need to apply some policies to these workstations, without join
> domain. Is there a GPO set in eDirectory, or any solution from
> Novell products for policies?


As far as I know, Windows Local Policy is your only option for non
domain joined computers without installing a third party agent on each
machine.

NetIQ has a product for administering Group Policy but I don't believe
it supports non-domain members -
https://www.netiq.com/products/group-policy-administrator/ - I can
check if you want.


Microsoft has a couple of tools that can help here:

- Security Compliance Manager (SCM) - Configure stand-alone machines:
Deploy your configurations to non-domain joined computers using the new
GPO Pack feature.
http://technet.microsoft.com/en-us/solutionaccelerators/cc835245.aspx

- There are also a group of tools for applying group policy to local
policy.
http://blogs.technet.com/b/fdcc/archive/2008/05/07/lgpo-utilities.aspx


--
If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Policy (GPO) from Novell products?

On 07/02/2014 09:24, tkmanh wrote:

> I am using Windows 8.1 Core, it doesn't have join-domain-function. I
> need to apply some policies to these workstations, without join domain.
> Is there a GPO set in eDirectory, or any solution from Novell products
> for policies?


Note that your similar thread in
https://forums.novell.com/showthread.php/474608 is receiving replies.

HTH.
--
Simon
NetIQ Knowledge Partner

------------------------------------------------------------------------
If you find this post helpful and are logged into the web interface,
please show your appreciation and click on the star below. Thanks.
------------------------------------------------------------------------
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Policy (GPO) from Novell products?

On Fri, 07 Feb 2014 09:24:04 +0000, tkmanh wrote:

> I am using Windows 8.1 Core, it doesn't have join-domain-function. I
> need to apply some policies to these workstations, without join domain.
> Is there a GPO set in eDirectory, or any solution from Novell products
> for policies?


Workstation management would be the point of the Zenworks product line.


--
--------------------------------------------------------------------------
David Gersic dgersic_@_niu.edu
Knowledge Partner http://forums.netiq.com

Please post questions in the forums. No support provided via email.
If you find this post helpful, please click on the star below.
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Policy (GPO) from Novell products?


dgersic;240361 Wrote:
> On Fri, 07 Feb 2014 09:24:04 +0000, tkmanh wrote:
>
> > I am using Windows 8.1 Core, it doesn't have join-domain-function. I
> > need to apply some policies to these workstations, without join

> domain.
> > Is there a GPO set in eDirectory, or any solution from Novell

> products
> > for policies?

>
> Workstation management would be the point of the Zenworks product line.
>
>
> --
> --------------------------------------------------------------------------
> David Gersic
> dgersic_@_niu.edu
> Knowledge Partner
> http://forums.netiq.com
>
> Please post questions in the forums. No support provided via
> email.
> If you find this post helpful, please click on the star below.


Does ZENworks 11 SP2 support Windows 8.1 Core?
Thanks.


--
tkmanh
------------------------------------------------------------------------
tkmanh's Profile: https://forums.netiq.com/member.php?userid=6774
View this thread: https://forums.netiq.com/showthread.php?t=49937

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Policy (GPO) from Novell products?

On 13/02/2014 02:35, tkmanh wrote:

> Does ZENworks 11 SP2 support Windows 8.1 Core?


This is a question better suited to a Novell Forum for ZENworks but no,
ZENworks 11 SP2 does not support any flavour of Windows 8.1 with support
being added post-ZENworks 11 SP3 (due to be released this quarter).

HTH.
--
Simon
NetIQ Knowledge Partner

------------------------------------------------------------------------
If you find this post helpful and are logged into the web interface,
please show your appreciation and click on the star below. Thanks.
------------------------------------------------------------------------
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Policy (GPO) from Novell products?


smflood;240662 Wrote:
> On 13/02/2014 02:35, tkmanh wrote:
>
> > Does ZENworks 11 SP2 support Windows 8.1 Core?

>
> This is a question better suited to a Novell Forum for ZENworks but no,
> ZENworks 11 SP2 does not support any flavour of Windows 8.1 with
> support
> being added post-ZENworks 11 SP3 (due to be released this quarter).
>
> HTH.
> --
> Simon
> NetIQ Knowledge Partner
>
> ------------------------------------------------------------------------
> If you find this post helpful and are logged into the web interface,
> please show your appreciation and click on the star below. Thanks.
> ------------------------------------------------------------------------


Dear Simon,
You mean ZENworks 11 SP3 or later version support Windows 8.1? And it
support Windows 8.1 Core edition which doesn't have Local Policy and
join-domin function? Because my company is in purchase of Windows 8.1
Core. So I would like to have more information.

Thanks!


--
tkmanh
------------------------------------------------------------------------
tkmanh's Profile: https://forums.netiq.com/member.php?userid=6774
View this thread: https://forums.netiq.com/showthread.php?t=49937

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Policy (GPO) from Novell products?

tkmanh wrote:

>
> You mean ZENworks 11 SP3 or later version support Windows 8.1? And it
> support Windows 8.1 Core edition which doesn't have Local Policy and
> join-domin function? Because my company is in purchase of Windows 8.1
> Core. So I would like to have more information.


Just some general advice here. Windows 8.1 Core is not designed for companies (and enterprise use). It is targeted at home/students/non corporate users.
If your company is looking at Windows 8.1 Core, Then you really should communicate to the decision makers that the reduced cost of Windows Core will be offset by higher administration costs when configuring and maintaining these computers.

To keep the price of Windows 8.1 Core low, Microsoft has removed/disabled many enterprise specific features (not just group policy and domain join).

I also believe it is incorrect to state that "Windows 8.1 Core edition which doesn't have Local Policy".

On Windows 8.1 Core, Microsoft has removed the group policy editor MMC snapin (which can also be used to edit local policy).

However the majority of group policy (and Local Policy) settings are registry based and as such you can still edit the registry to implement a specific policy.
Microsoft has a spreadsheet that documents which registry settings correspond to the group/local policy settings: http://www.microsoft.com/en-us/download/details.aspx?id=25250

If you have more Zenworks specific questions, please post them in the zenworks forum (not here)

--
If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Policy (GPO) from Novell products?


alexmchugh;240750 Wrote:
> tkmanh wrote:
>
> >
> > You mean ZENworks 11 SP3 or later version support Windows 8.1? And it
> > support Windows 8.1 Core edition which doesn't have Local Policy and
> > join-domin function? Because my company is in purchase of Windows 8.1
> > Core. So I would like to have more information.

>
> Just some general advice here. Windows 8.1 Core is not designed for
> companies (and enterprise use). It is targeted at home/students/non
> corporate users.
> If your company is looking at Windows 8.1 Core, Then you really should
> communicate to the decision makers that the reduced cost of Windows Core
> will be offset by higher administration costs when configuring and
> maintaining these computers.
>
> To keep the price of Windows 8.1 Core low, Microsoft has
> removed/disabled many enterprise specific features (not just group
> policy and domain join).
>
> I also believe it is incorrect to state that "Windows 8.1 Core edition
> which doesn't have Local Policy".
>
> On Windows 8.1 Core, Microsoft has removed the group policy editor MMC
> snapin (which can also be used to edit local policy).
>
> However the majority of group policy (and Local Policy) settings are
> registry based and as such you can still edit the registry to implement
> a specific policy.
> Microsoft has a spreadsheet that documents which registry settings
> correspond to the group/local policy settings:
> http://www.microsoft.com/en-us/download/details.aspx?id=25250
>
> If you have more Zenworks specific questions, please post them in the
> zenworks forum (not here)
>
> --
> If you find this post helpful and are logged into the web interface,
> show your appreciation and click on the star below...


Dear alexmchugh,

Thank you very much for your advice.
My company is using Windows 8 Pro and 8.1 Core also. Because there are
too many workstations, we can't supply all with Pro licenses, it costs
much 🙂

Alexmchugh, is there any tool can interact with local policy as 'group
policy editor MMC snapin'?

Thanks.


--
tkmanh
------------------------------------------------------------------------
tkmanh's Profile: https://forums.netiq.com/member.php?userid=6774
View this thread: https://forums.netiq.com/showthread.php?t=49937

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Policy (GPO) from Novell products?

tkmanh wrote:

>
> Thank you very much for your advice.
> My company is using Windows 8 Pro and 8.1 Core also. Because there are
> too many workstations, we can't supply all with Pro licenses, it costs
> much 🙂


Which is my point exactly. That extra cost is just moved on your company's budgets from "licensing" to your job/department (and it becomes a hidden cost) because the Core version lacks critical enterprise management capabilities.
Once you factor the extra work you have to do for each of these "crippled machines", no money is actually saved (and it might end up costing more). This is why I say - tell the management now before this cost becomes entrenched as "hidden".


> Alexmchugh, is there any tool can interact with local policy as 'group
> policy editor MMC snapin'?


Yes secpol.msc but that has also been removed from Windows 8.1 Core.

I've already pointed out that most of these settings can be set via the registry. Write a batch script (or vbscript, powershell etc) that sets these settings and include this script with your default build/install automation.

That said, this is off-topic, you might get some other suggestions if you asked the same question elsewhere.

--
If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.