-
8/14/2019 6425A_06 Config User Environment Using Group Policy
1/36
Module 6: Configuring
User EnvironmentsUsing Group Policy
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
2/36
Module Overview, Cache:
Configuring Group Policy Settings
Configuring Scripts and Folder Redirection UsingGroup Policy
Configuring Administrative Templates
Configuring Group Policy Preferences
Deploying Software Using Group Policy
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
3/36
Lesson 1: Configuring Group Policy Settings
Options for Configuring Group Policy Settings
Demonstration: Configuring Group Policy Settings Usingthe Group Policy Editor
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
4/36
Options for Configuring Group Policy Settings
Enable / Disable
Enable / Disable Multi-valued settings
Multi-valued settings
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
5/36
Demonstration: Configuring Group Policy SettingsUsing the Group Policy Editor
In this demonstration, you will see how to configure GroupPolicy settings
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
6/36
Lesson 2: Configuring Scripts and FolderRedirection Using Group Policy
What Are Group Policy Scripts?
Demonstration: Configuring Scripts with Group Policy
What Is Folder Redirection?
Folder Redirection Configuration Options
Options for Securing Redirected Folders Demonstration: Configuring Folder Redirection
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
7/36
What Are Group Policy Scripts?
Group Policy script settings can be used to assign:
For computers
Startup scripts
Shutdown scripts
For users
Logon scripts
Logoff scripts
You can use scripts to perform many tasks, such as clearing page files ormapping drives, and clearing temp folders for users, etc
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
8/36
Demonstration: Configuring Scripts withGroup Policy
In this demonstration, you will see how to assign a logonscript to a user
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
9/36
What Is Folder Redirection?
Folder redirection allows folders tobe located on a network server, butappear as if they are located on thelocal drive
The folders that can be redirected are:
My Documents (Documents inWindows Vista)
Application Data (AppData in Windows Vista)
Desktop
Start Menu Contacts
Downloads
Favorites
Searches
Links
Extra folders that can be redirected
in Windows Vista are:
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
10/36
Folder Redirection Configuration Options
Accounting
Users
AccountsN-Z
AccountsA-M
AccountingManagers
Anne
MistyPr
ivat
e
Privat
e
Use basic Folder Redirection when
all users save their files to thesame location
With advanced Folder Redirection,the server hosting the folder locationis based on group membership
Target folder location options:
Redirect to the usershome directory
Create a folder for each user
under the root path Redirect to the
following location
Redirect to the localuserprofile location
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
11/36
Options for Securing Redirected Folders
Full control - subfolders and files only
Administrator
Security group ofusers thatput data on share
Local System
Creator/Owner
None
List Folder/Read Data, Create Folders/AppendData - This Folder Only
Full control
NTFS permissions for root folder
Full control - subfolders and files onlyCreator/OwnerSecurity group ofusers thatput data on share
Full control
Share permissions for root folder
%Username% Full control, owner of folder
None
Full Control
NTFS permissions for each users redirected folder
Administrators
Local system
Full control - subfolders and files onlyCreator/Owner
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
12/36
Demonstration: Configuring Folder Redirection
In this demonstration, you will see how to configure folderredirection for the Documents folder
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
13/36
Lesson 3: Configuring Administrative Templates
What Are Administrative Templates?
Demonstration: Configuring Administrative Templates
Modifying Administrative Templates
Demonstration: Adding Administrative Templates forOffice Applications
Discussion: Options for Using Administrative Templates
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
14/36
What Are Administrative Templates?
Administrative Templatessections forcomputers are:
Windows components
System
Network
Printers
Administrative Templatessections for users are:
Windows components
Start menu and taskbar
Desktop
Control panel
Shared folders
Network
System
Administrative Templates allow you to control both the environment of
the operating system and user experience
D i C fi i
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
15/36
Demonstration: ConfiguringAdministrative Templates
In this demonstration, you will see how to configureAdministrative Templates
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
16/36
Modifying Administrative Templates
ADMX files: all policy files store into only ONE folder (can
download ADMX migrator from MS web to upgrade ADM toADMX)
but.ADM: each policy stored a separate 3M folder in sysvol
Are extensible
Can be edited with any text editor
New ADMX files can be added to the Policy Definitions folder orthe Central Store
D t ti Addi Ad i i t ti T l t
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
17/36
Demonstration: Adding Administrative Templatesfor Office Applications
In this demonstration, you will see how to add in the ADMfiles for Office 2007
Di i O ti f U i Ad i i t ti
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
18/36
Discussion: Options for Using AdministrativeTemplates
What Administrative Templates are deployed in yourorganization now?
What desktop settings would you like to implement forusers in your organization?
Which Administrative Template settings will you need toapply?
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
19/36
Lesson 4: Configuring Group Policy Preferences
What Are Group Policy Preferences?
Difference Between Group Policy Settings and Preferences
Group Policy Preference Features
Deploying Group Policy Preferences
Demonstration: Deploying Group Policy Preferences
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
20/36
What Are Group Policy Preferences?
Group Policy preferences expand the range of configurable
settings within a GPO
Are not enforced
Enable IT professionals to configure, deploy, and manageoperating system and application settings that were notmanageable using Group Policy
Diffe ence Bet een G o p Polic Settings
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
21/36
Difference Between Group Policy Settingsand Preferences
Group Policy settings Group Policy preferences
Strictly enforces policy settingsby writing the settings to areasof the registry that standardusers cannot modify
Are written to the normallocations in the registry that theapplication or operating systemfeature uses to store the setting
Typically disables the userinterface for settings that GroupPolicy is managing
Do not cause the application oroperating system feature todisable the user interface for thesettings they configure
Refreshes policy settings at a
regular interval @90min
Refreshes preferences using the
same interval as Group Policysettings by default
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
22/36
Group Policy Preference Features
Used to configure additionaloptions that control thebehavior of a Group Policypreference item
Common TabTargeting Features
Determines to which users andcomputers a preferenceitem applies
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
23/36
Deploying Group Policy Preferences
Windows Server 2008 includes Group Policypreferences by default as part of theGroup Policy Management Console (GPMC)
Windows Server 2008 includes Group Policy preferences by
default as part of the GPMC
Group Policy preferences Client side extension (CSE)must be deployed to any client computer to which you want todeploy preferences
Demonstration: Deploying Group
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
24/36
Demonstration: Deploying GroupPolicy Preferences
In this demonstration, you will see how to deploy GroupPolicy preferences
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
25/36
Lesson 5: Deploying Software Using Group Policy
Options for Deploying and Managing Software UsingGroup Policy
How Software Distribution Works
Options for Installing Software
Demonstration: Configuring Software Distribution
Options for Modifying the Software Distribution
Demonstration: Modifying Software Distribution
Maintaining Software Using Group Policy
Discussion: Evaluating the Use of Group Policy toDeploy Software
Options for Deploying and Managing Software
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
26/36
Preparation
1
Options for Deploying and Managing SoftwareUsing Group Policy
Deployment
1.0
2
Maintenance
2.0
3
Removal
4
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
27/36
How Software Distribution Works
Windows Installer=.msi
(.msi: clean install/remove;english.mst(transform): maximum user interface
But .exe: unclean install/remove)
Windows Installer service
Fully automates thesoftware installation andconfiguration process
Modifies or repairs an
existing applicationinstallation
Windows Installer service
Fully automates thesoftware installation andconfiguration process
Modifies or repairs an
existing applicationinstallation
Windows Installer package containsInformation about installing oruninstalling an application
An .msi file and any external sourcefiles
Summary information about the
applicationA reference to an installation point
Windows Installer package containsInformation about installing oruninstalling an application
An .msi file and any external sourcefiles
Summary information about the
applicationA reference to an installation point
Benefits of
Using
Windows
Installer
Custominstallations
Resilientapplications
Clean removal
Custominstallations
Resilientapplications
Clean removal
O i f lli S f
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
28/36
SoftwareDistribution Point
SoftwareDistribution Point
Options for Installing Software:1.Assign: mandatory, 2. Publish: optional
Publish software usingdocument activation
Publish software usingdocument activation
?
Publish softwareusing Add or
Remove Programs
Publish softwareusing Add or
Remove Programs
Assign softwareduring Computer
Configuration
Assign softwareduring Computer
Configuration
Assign softwareduring User
Configuration
Assign softwareduring User
Configuration
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
29/36
Demonstration: Configuring Software Distribution
In this demonstration, you will see how to deploy asoftware package through both assigning and publishing
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
30/36
Options for Modifying the Software Distribution
Software can be categorized in the Add Programs applet
Software deployment can be customized using MST files
File extensions can be associated with particular applications
Options:
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
31/36
Demonstration: Modifying Software Distribution
In this demonstration, you will see how to:
Create software categories
Configure software distribution properties
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
32/36
Maintaining Software Using Group Policy
Mandatory upgrade Users can use only
the upgraded version
Optional upgrade Users can decidewhen to upgrade
Selective upgrade You can select
specific users for anupgrade
2.0
1.02.0
2.0
1.0
Deploy nextversion of the
application
Deploy nextversion of the
application
2.0
Discussion: Evaluating the Use of Group Policy to
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
33/36
Discussion: Evaluating the Use of Group Policy toDeploy Software
What are the advantages of using Group Policy todeploy software?
What are the limitations?
What additional features are provided by other softwaredistribution packages?
Lab: Configuring User Environments Using
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
34/36
Lab: Configuring User Environments UsingGroup Policy
Exercise 1: Configuring Scripts and Folder Redirection
Exercise 2: Configuring Administrative Templates
Exercise 3: Configuring Preferences
Exercise 4: Verifying GPO Application
Logon information
Virtual machine NYC-DC1, NYC-CL1
User name AdministratorPassword Pa$$w0rd
Estimated time: 60 minutes
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
35/36
Lab Review
You have configured folder redirection for an OU, but noneof the users folders are being redirected to the network
location. When you look in the root folder, you observethat a subdirectory named for each user has been created,but they are empty. What is the problem?
You have an .MSI file for a small application that you wantglobally available to all users and computers in an OU.
What steps would you take to accomplish this?
-
8/14/2019 6425A_06 Config User Environment Using Group Policy
36/36
Module Review and Takeaways
Considerations
Review questions