I'm doing a rollout of new machines with Windows 7 this summer, and moving all the clients in my department from XP to Windows 7. The domain controller is running 2k3 Server SP2.
Most of the Group Policy I need is already there in GPMC, but there are some Windows 7-specific settings (e.g., BitLocker settings, UAC) that I can't set from the DC. I've read in a few documents that it's possible to manage these settings from the 2k3 server (if I configure them from a Win7 client?) but I haven't been able to find any good documentation on how this is actually done.
I've tried installing RSAT on a Windows 7 client, but it doesn't seem to want to talk to the DS. As far as I know, the DS is configured to accept remote management connections.