Stub - In 2013, I compiled all the info required to do this, includes a very important step that you must do, or Group Policy fails!!

(as you know, Microsoft is soon to abandon the venerable Windows Server 2003.)

hopefully, will post this tonight (Saturday, 2/28)