Then, along comes Windows Vista with Windows Defender built in. If one installs the Vista machine into the same OU that has the Windows Defender Group Policy Object (GPO) software installation setting applied, we end up with the following series of errors:
Event ID 103: The removal of the assignment of application Windows Defender from policy SBSComputers Software Installation Policy failed. The error was:%%2We know that that Windows Defender cannot be removed from Vista by the GP setting as it was never installed by that GP setting in the first place as the previous Event ID 101 error indicated.
So, to alleviate any Windows XP Software Install GPO conflicts with Windows Vista, we create a new OU:
What this means for us is a little more organization between the two Windows desktop operating systems.
SBSVistaComputers OU with attached Security Policy
Keeping a naming convention is important, as this will clue anyone in as to why the OU is there in the first place.
When adding a new computer to the SBS domain via the Set Up Computer Wizard, we are greeted with the following OU options for the new computer:
Set Up Computer Wizard: SBSVistaComputers OU Available
If one tries to nest the two OUs under the SBSComputers, the SBSXPComputers and SBSVistaComputers OUs will not show up in the Set Up Computer Wizard:
Also, one needs to remember when adding a new OU to Link any common GPOs as required.
When it comes to Windows Vista, keep in mind that we need to manage any Group Policy settings particular to Windows Vista on a Vista machine signed in as the domain admin.
Microsoft Small Business Specialists
*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.