section 13: configuring group policy preferences introducing group policy preferences comparing...
TRANSCRIPT
Section 13: Configuring Group Policy Preferences
Introducing Group Policy Preferences
Comparing Preferences and Policy Settings
Configuring Preferences Settings
Managing Windows Environments with Group Policy
© 2013 Global Knowledge Training LLC. All rights reserved.
Section Objectives
After completing this section, you will be able to:Describe the purpose of Group Policy PreferencesExplain the differences between Preferences and
Policy settings Identify the settings that you can configure in the
Computer Configuration and User Configuration sections of the Group Policy Management Console
Describe the Windows and Control Panel settingsList the advanced Preferences configuration options
that are common to all GPO Preferences
13-2
© 2013 Global Knowledge Training LLC. All rights reserved.
Introducing Group Policy Preferences
13-3
Group Policy Preferences Features
Deploying Group Policy Preferences
© 2013 Global Knowledge Training LLC. All rights reserved.
Group Policy Preferences Feature
Group policies do not cover all characteristics of the operating system.
Logon scripts have filled the void in the past.
Preferences include the ability to create as well as configure settings.
13-3
© 2013 Global Knowledge Training LLC. All rights reserved.
Deploying Group Policy Preferences
Group Policy Preferences are included with Windows Server 2008 and later operating systems
Windows Vista SP1 includes Group Policy PreferencesGroup Policy Preferences are also available through a
downloadable update for Windows Server 2003 and Windows XP
13-4
© 2013 Global Knowledge Training LLC. All rights reserved.
Comparing Preferences and Policy Settings
Feature Preferences Policies
Enforcement of settings
User can change preferences. Refresh is optional.
User cannot change settings. Settings are refreshed
regularly.
Ease of administration
New settings can be imported or created.
New settings require editing of administrative templates.
Files and folders New files and folders can be created.
Existing files can be modified.
File and folder management is not possible.
Application Preferences are permanent. Policy removal does not revert
preferences.
Settings are temporary. Policy removal reverts
settings.
Filtering Granular targeting is built in. WMI queries for filtering.
13-5
© 2013 Global Knowledge Training LLC. All rights reserved.
Configuring Preferences Settings
13-6
Computer and User Configuration Sections
Windows Settings Control Panel Settings Mapping Drives Common Settings Item Level Targeting
© 2013 Global Knowledge Training LLC. All rights reserved.
Computer and User Configuration Sections
Preference items are available for both the Computer Configuration and User Configuration sections.
User Preferences
Computer Preferences
13-6
© 2013 Global Knowledge Training LLC. All rights reserved.
Windows Settings
Setting Description
Applications Extensible for ISVs to create simple Group Policy preference settings for their applications
Drive Maps Create, modify, or delete mapped drives
Environment Create, modify, or delete environment variables
Files Copy, modify the attributes of, replace, or delete files
Folders Create, modify, or delete folders
Ini Files Modify .ini or .inf files
Registry Copy registry settings to other computers and create, replace, or delete registry settings
Network Shares Create, modify, or remove shares
Shortcuts Create, modify, or delete shortcuts
13-7
© 2013 Global Knowledge Training LLC. All rights reserved.
Control Panel Settings
Setting Description
Data Sources Manage ODBC connections
Devices Manage device drivers
Folder Options Configure folder options and file extension associations
Internet Settings Manage Windows Internet Explorer settings
Local Users and Groups Create, modify, or delete local users and groups
Network Options Manage VPN and DUN connections
Power Options Configure power management settings
Printers Manage printer connections
Regional Options Modify regional settings
Scheduled Tasks Manage scheduled tasks
Services Manage service behavior
Start Menu Configure Start menu settings
13-8
© 2013 Global Knowledge Training LLC. All rights reserved.
Mapping Drives
One example of using Preferences is for mapping network drives.
This eliminates the need for logon scripts to map drives
Preferences drive mapping is flexible enough to take into account existing drive letters that may conflict.
13-9
© 2013 Global Knowledge Training LLC. All rights reserved.
Common Settings
The application of preferences can be controlled by using the “common” properties of a preference item.
Common settings include: Error handling Security context Item removal Reapplication Item-level targeting
13-10
© 2013 Global Knowledge Training LLC. All rights reserved.
Item-Level Targeting
Multiple conditions can be configured to restrict the application of the preference item.
Creating and using the condition is simpler and easier than using a WMI query.
13-11
© 2013 Global Knowledge Training LLC. All rights reserved.
Summary
Group Policy Preferences allow administrators to configure a broad array of settings, which were previously available only through logon scripts based on batch files or VBScript.
13-13
© 2013 Global Knowledge Training LLC. All rights reserved.
Summary (cont.)
The following table compares Preferences and Policy settings.
13-13
Feature Policies Preferences
Enforcement of settings
User cannot change settings. Settings are refreshed regularly.
User can change preferences. Refresh is optional.
Ease of administration
New settings require editing of administrative templates.
New settings can be imported or created.
Files and folders
File and folder management is not possible.
New files and folders can be created.
Existing files can be modified.
Application Settings are temporary. Policy removal reverts settings.
Preferences are permanent. Policy removal does not revert
preferences.
Filtering WMI queries for filtering. Granular targeting is built in.
© 2013 Global Knowledge Training LLC. All rights reserved.
Summary (cont.)
In the Group Policy Management Console, the Computer Configuration section, you can configure these settings:
Network Shares Services
In the Computer Configuration section, you can configure these settings:
Applications Drive Maps Internet Settings Start Menu
13-13
© 2013 Global Knowledge Training LLC. All rights reserved.
Summary (cont.)
The following table describes the Windows Group Policy Preferences settings.
13-13
Setting Description
Applications Extensible for ISVs to create simple Group Policy preference settings for their applications.
Drive Maps Create, modify, or delete mapped drives
Environment Create, modify, or delete environment variables
Files Copy, modify the attributes of, replace, or delete files
Folders Create, modify, or delete folders
Ini Files Modify .ini or .inf files
Registry Copy registry settings to other computers and create, replace, or delete registry settings
Network Shares Create, modify, or remove shares
Shortcuts Create, modify, or delete shortcuts
© 2013 Global Knowledge Training LLC. All rights reserved.
Summary (cont.)
The following table describes the Control Panel Group Policy Preferences settings.
13-14
Setting Description
Data Sources Manage ODBC connections
Devices Manage device drivers
Folder Options Configure folder options and file extension associations
Internet Settings Manage Windows Internet Explorer settings
Local Users and Groups Create, modify, or delete local users and groups
Network Options Manage VPN and DUN connections
Power Options Configure power management settings
Printers Manage printer connections
Regional Options Modify regional settings
Scheduled Tasks Manage scheduled tasks
Services Manage service behavior
Start Menu Configure Start menu settings
© 2013 Global Knowledge Training LLC. All rights reserved.
Summary (cont.)
The advanced configuration options are available on the Common tab of the Properties sheet for each preference setting. Some of the options that are common to all GPO Preferences are:Error handlingSecurity context Item removalReapplication Item-level targeting
13-14
© 2013 Global Knowledge Training LLC. All rights reserved.
Knowledge Check
1. What are the differences between GPO Policies and GPO Preferences? (Choose all that apply.)
a. Preferences are not enforced.
b. Preferences do not revert when the policy is removed.
c. Preferences targeting requires a WMI query.
d. Preferences allow you to create or modify folders and files.
13-14
© 2013 Global Knowledge Training LLC. All rights reserved.
Knowledge Check
2. What is the purpose of Group Policy Preferences?Group Policy Preferences allow administrators to configure a broad array of settings, which were previously available only through logon scripts based on batch files or VBScript.
13-15
© 2013 Global Knowledge Training LLC. All rights reserved.
Knowledge Check (cont.)
3. Which of the following settings are located in the Computer Configuration section of the Group Policy Management Console? (Choose all that apply.)
a. Start Menu
b. Drive Maps
c. Applications
d. Services
13-15
© 2013 Global Knowledge Training LLC. All rights reserved.
Knowledge Check (cont.)
4. List the advanced Preferences configuration options that are common to all items in Group Policy.
Error handling Security context Item removal Reapplication Item-level targeting
13-15
© 2013 Global Knowledge Training LLC. All rights reserved.
Knowledge Check (cont.)
5. Describe each of the following Group Policy Preferences settings.
Registry: Copy registry settings to other computers and create, replace, or delete registry settings
Drive Maps: Create, modify, or delete mapped drives
Folder Options: Configure folder options and file extension associations
Network Options: Manage VPN and DUN connections
13-15