...Because someone's gotta tell the story...


To return to the main Blog List, click Full Blog Listing.


Group Policy
Internet Explorer

Group Policy and Server Core

Friday, December 08, 2017 in Technical Articles (Views: 1251)
First off, let me preface this and say that this is not the definitive guide to Group Policy on Server Core. Group Policy is really both an art and a science to make work properly.

One thing I do want to point out here is how really easy defining policies for Server Core can be. With any GPO implementation, the most important thing to note is that less is more when it comes to GPO. Just because you have 1600 Internet Explorer settings doesn't mean you need to set them all.

Core is a bit of a different animal, and with the lack of explorer.exe (the GUI), you do not need any UI type policy. First and foremost, I tend to set policy loopback for Server Core machines to replace (i.e. no GPO), or minimal GPO in user settings.

For computer settings, many do the basics, firewall policies, some security policies, very basic things. I wouldn't recommend just slapping a standard server policy on, but really look through your settings and insure you are putting relevant settings in.

Another example is that you start with an admin command prompt, so I suppose UAC is also out of the question, you can see where this is going.

So I suggest that for all Core installs to really take a fresh look at policy. This will really help your server performance and in the end make some happier end users.


Related Blogs You May Be Interested In:

To leave a comment, please log in and/or register.