Remove legacy Active Directory Group Policy objects and logon settings for Windows SBS 2011 Standard migration

Published: January 28, 2011

Updated: January 28, 2011

Applies To: Windows Small Business Server 2011 Standard

Note

These are optional tasks.

Remove logon scripts

Windows SBS 2003 uses logon scripts for tasks such as installing software and customizing desktops. In Windows SBS 2011 Standard, the Windows SBS 2003 logon scripts are replaced with a combination of logon scripts and Group Policy objects.

Note

If you modified the Windows SBS 2003 logon scripts, you should rename the scripts to preserve your customizations.

Note

Windows SBS 2003 logon scripts apply only to user accounts that were added by using the Add New Users Wizard.

To remove the Windows SBS 2003 logon scripts

1. On the Migration Wizard Home page, click Remove legacy group policies and logon settings, and then click Next.

2. Log on to the Source Server with an administrator account and password.

3. On the Source Server, click Start, and then click Run.

4. Type \\localhost\sysvol\<YourNetworkDomainName>.local\scripts, and then press ENTER.

5. Delete or rename SBS_LOGIN_SCRIPT.bat.

After you delete the old logon scripts, use the following procedure to verify that all users’ profiles are updated to not use a logon script:

To verify user profiles

1. On the Source Server, click Start, click Administrative Tools, and then click Active Directory Users and Computers.

2. In the navigation pane, expand <YourNetworkDomainName>, expand My Business, expand Users, and then expand SBSUsers.

3. Select all the user accounts, right-click the highlighted user accounts, and then click Properties.

4. On the Profile tab, select the logon script check box, clear the text field, and then click Apply.

5. Close Active Directory Users and Computers.

6. When you finish removing the logon scripts and verifying that the users’ profiles are updated, return to the Migration Wizard on the Destination Server.

7. If you are finished deleting old logon scripts and old Group Policy objects, click Task Complete, and then click Next. Alternately, if you want to remove old Group Policy objects, click Remove old Group Policy Objects.

Remove legacy Active Directory Group Policy objects

The Group Policy objects (GPOs) are updated for Windows SBS 2011 Standard. They are a superset of the Windows SBS 2003 GPOs. For Windows SBS 2011 Standard, a number of the Windows SBS 2003 GPOs and WMI filters have to be manually deleted to prevent conflicts with the Windows SBS 2011 Standard GPOs and WMI filters.

Note

If you modified the original Windows SBS 2003 Group Policy objects, you should save copies of them in a different location, and then delete them from Windows SBS 2003.

To remove old Group Policy objects from Windows SBS 2003

1. Log on to the Source Server with an administrator account.

2. Click Start, and then click Server Management.

3. In the navigation pane, click Advanced Management, click Group Policy Management, and then click Forest:<YourDomainName>.

4. Click Domains, click <YourDomainName>, and then click Group Policy Objects.

5. Right-click Small Business Server Auditing Policy, click Delete, and then click OK.

6. Repeat step 5 to delete the following GPOs that apply to your installation:

   • Small Business Server Client Computer

   • Small Business Server Domain Password Policy

     We recommend you configure the password policy in Windows SBS 2011 Standard to enforce strong passwords. To configure the password policy, use the Windows SBS Console, which writes the configuration to the default domain policy. The password policy configuration is not written to the Small Business Server Domain Password Policy object, like it was in Windows SBS 2003. If you want to keep your Windows SBS 2003 password policies, follow the instructions in the next procedure, To keep the Windows SBS 2003 password policy before you delete the Small Business Server Domain Password Policy.

   • Small Business Server Internet Connection Firewall

   • Small Business Server Lockout Policy

   • Small Business Server Remote Assistance Policy

   • Small Business Server Windows Firewall

   • Small Business Server Windows Vista Policy

   • Small Business Server Update services Client Computer Policy

   • Small Business Server Update Services Common Settings Policy

   • Small Business Server Update Services Server Computer Policy

7. Confirm that all of the GPOs are deleted.

To keep the Windows SBS 2003 password policy

1. In the Windows SBS 2011 Standard Console, on the navigation bar, click the Users and Groups tab, and then click Users.

2. In the Tasks pane, click Change password policies.

3. Change the password policy to match the Windows SBS 2003 password policy, and then click OK.

4. Delete the Small Business Server Domain Password Group Policy object.

To remove WMI filters from Windows SBS 2003

1. Log on to the Source Server with an administrator account.

2. Click Start, and then click Server Management.

3. In the navigation pane, click Advanced Management, click Group Policy Management, and then click Forest:<YourNetworkDomainName>

4. Click Domains, click <YourNetworkDomainName>, and then click WMI Filters.

5. Right-click PostSP2, click Delete, and then click Yes.

6. Right-click PreSP2, click Delete, and then click Yes.

7. Confirm that these two WMI filters are deleted.

8. When you finish deleting the old logon scripts, old Group Policy objects, and WMI folders, return to the Migration Wizard on the Destination Server, click Task Complete on the Remove legacy group policies and logon settings page, and then click Next.