Remove old Active Directory Group Policy objects for Windows SBS 2008 migration

  • Article

Updated: January 22, 2009

Applies To: Windows SBS 2008

The Group Policy objects (GPOs) are updated for Windows SBS 2008, and they are a superset of the Windows SBS 2003 GPOs. For Windows SBS 2008, a number of the Windows SBS 2003 GPOs and WMI Filters have to be manually deleted to prevent conflicts with the Windows SBS 2008 GPOs and WMI Filters.

Note

If you modified the original Windows SBS 2003 Group Policy objects, you should save copies of them in a different location, and then delete them from Windows SBS 2003.

To remove old Group Policy objects from Windows Small Business Server 2003

  1. Log on to the Source Server with an administrator account.

  2. Click Start, and then click Server Management.

  3. In the navigation pane, click Advanced Management, click Group Policy Management, and then click Forest: <YourDomainName>.

  4. Click Domains, click <YourDomainName>, and then click Group Policy Objects.

  5. Right-click Small Business Server Auditing Policy, click Delete, and then click OK.

  6. Repeat step 5 to delete all of the following GPOs:

    • Small Business Server Client Computer

    • Small Business Server Domain Password Policy

      Password policies in Windows SBS 2008 enforce strong passwords by default, and the password policies dialog in the Windows SBS Console writes the configuration to the default domain policy. The password policy configuration is not written to the Small Business Server Domain Password Policy object, as in Windows SBS 2003. If you want to keep your Windows SBS 2003 password policies, follow the instructions in the To keep the Windows SBS password policy procedure before you delete the Small Business Server Domain Password Policy.

    • Small Business Server Internet Connection Firewall

    • Small Business Server Lockout Policy

    • Small Business Server Remote Assistance Policy

    • Small Business Server Windows Firewall

    • Small Business Server Windows Vista Policy

    • Small Business Server Update services Client Computer Policy

    • Small Business Server Update Services Common Settings Policy

    • Small Business Server Update Services Server Computer Policy

Note

Your Windows SBS 2003 installation may not have all of these GPOs.

  1. Confirm that all of the GPOs are deleted.

To keep the Windows SBS 2003 password policy

  1. In the Windows SBS Console, on the navigation bar, click the Users and Groups tab, and then click Users.

  2. In the Tasks pane, click Change password policies.

  3. Change the password policy to match the Windows SBS 2003 password policy, and then click OK.

  4. Delete the Small business Server Domain Passsword Policy Group Policy object.

To remove WMI filters from Windows Small Business Server 2003

  1. Log on to the Source Server with an administrator account.

  2. Click Start, and then click Server Management.

  3. In the navigation pane, click Advanced Management, click Group Policy Management, and then click Forest: <YourDomainName>.

  4. Click Domains, click <YourDomainName>, and then click WMI Filters.

  5. Right-click PostSP2, click Delete, and then click Yes.

  6. Right-click PreSP2, click Delete, and then click Yes.

  7. Confirm that these two WMI Filters are deleted.

  8. When you finish deleting the old logon scripts, old Group Policy objects, and WMI folders, return to the Migration Wizard on the destination server, click Task Complete on the Remove legacy group policies and logon settings page, and then click Next.