6425A_06 Config User Environment Using Group Policy

8/14/2019 6425A_06 Config User Environment Using Group Policy

1/36

Module 6: Configuring

User EnvironmentsUsing Group Policy


2/36

Module Overview, Cache:

Configuring Group Policy Settings

Configuring Scripts and Folder Redirection UsingGroup Policy

Configuring Administrative Templates

Configuring Group Policy Preferences

Deploying Software Using Group Policy


3/36

Lesson 1: Configuring Group Policy Settings

Options for Configuring Group Policy Settings

Demonstration: Configuring Group Policy Settings Usingthe Group Policy Editor


4/36

Options for Configuring Group Policy Settings

Enable / Disable

Enable / Disable Multi-valued settings

Multi-valued settings


5/36

Demonstration: Configuring Group Policy SettingsUsing the Group Policy Editor

In this demonstration, you will see how to configure GroupPolicy settings


6/36

Lesson 2: Configuring Scripts and FolderRedirection Using Group Policy

What Are Group Policy Scripts?

Demonstration: Configuring Scripts with Group Policy

What Is Folder Redirection?

Folder Redirection Configuration Options

Options for Securing Redirected Folders Demonstration: Configuring Folder Redirection


7/36

What Are Group Policy Scripts?

Group Policy script settings can be used to assign:

For computers

Startup scripts

Shutdown scripts

For users

Logon scripts

Logoff scripts

You can use scripts to perform many tasks, such as clearing page files ormapping drives, and clearing temp folders for users, etc


8/36

Demonstration: Configuring Scripts withGroup Policy

In this demonstration, you will see how to assign a logonscript to a user


9/36

What Is Folder Redirection?

Folder redirection allows folders tobe located on a network server, butappear as if they are located on thelocal drive

The folders that can be redirected are:

My Documents (Documents inWindows Vista)

Application Data (AppData in Windows Vista)

Desktop

Start Menu Contacts

Downloads

Favorites

Searches

Links

Extra folders that can be redirected

in Windows Vista are:


10/36

Folder Redirection Configuration Options

Accounting

Users

AccountsN-Z

AccountsA-M

AccountingManagers

Anne

MistyPr

ivat

e

Privat

e

Use basic Folder Redirection when

all users save their files to thesame location

With advanced Folder Redirection,the server hosting the folder locationis based on group membership

Target folder location options:

Redirect to the usershome directory

Create a folder for each user

under the root path Redirect to the

following location

Redirect to the localuserprofile location


11/36

Options for Securing Redirected Folders

Full control - subfolders and files only

Administrator

Security group ofusers thatput data on share

Local System

Creator/Owner

None

List Folder/Read Data, Create Folders/AppendData - This Folder Only

Full control

NTFS permissions for root folder

Full control - subfolders and files onlyCreator/OwnerSecurity group ofusers thatput data on share

Full control

Share permissions for root folder

%Username% Full control, owner of folder

None

Full Control

NTFS permissions for each users redirected folder

Administrators

Local system

Full control - subfolders and files onlyCreator/Owner


12/36

Demonstration: Configuring Folder Redirection

In this demonstration, you will see how to configure folderredirection for the Documents folder


13/36

Lesson 3: Configuring Administrative Templates

What Are Administrative Templates?

Demonstration: Configuring Administrative Templates

Modifying Administrative Templates

Demonstration: Adding Administrative Templates forOffice Applications

Discussion: Options for Using Administrative Templates


14/36

What Are Administrative Templates?

Administrative Templatessections forcomputers are:

Windows components

System

Network

Printers

Administrative Templatessections for users are:

Windows components

Start menu and taskbar

Desktop

Control panel

Shared folders

Network

System

Administrative Templates allow you to control both the environment of

the operating system and user experience

D i C fi i


15/36

Demonstration: ConfiguringAdministrative Templates

In this demonstration, you will see how to configureAdministrative Templates


16/36

Modifying Administrative Templates

ADMX files: all policy files store into only ONE folder (can

download ADMX migrator from MS web to upgrade ADM toADMX)

but.ADM: each policy stored a separate 3M folder in sysvol

Are extensible

Can be edited with any text editor

New ADMX files can be added to the Policy Definitions folder orthe Central Store

D t ti Addi Ad i i t ti T l t


17/36

Demonstration: Adding Administrative Templatesfor Office Applications

In this demonstration, you will see how to add in the ADMfiles for Office 2007

Di i O ti f U i Ad i i t ti


18/36

Discussion: Options for Using AdministrativeTemplates

What Administrative Templates are deployed in yourorganization now?

What desktop settings would you like to implement forusers in your organization?

Which Administrative Template settings will you need toapply?


19/36

Lesson 4: Configuring Group Policy Preferences

What Are Group Policy Preferences?

Difference Between Group Policy Settings and Preferences

Group Policy Preference Features

Deploying Group Policy Preferences

Demonstration: Deploying Group Policy Preferences


20/36

What Are Group Policy Preferences?

Group Policy preferences expand the range of configurable

settings within a GPO

Are not enforced

Enable IT professionals to configure, deploy, and manageoperating system and application settings that were notmanageable using Group Policy

Diffe ence Bet een G o p Polic Settings


21/36

Difference Between Group Policy Settingsand Preferences

Group Policy settings Group Policy preferences

Strictly enforces policy settingsby writing the settings to areasof the registry that standardusers cannot modify

Are written to the normallocations in the registry that theapplication or operating systemfeature uses to store the setting

Typically disables the userinterface for settings that GroupPolicy is managing

Do not cause the application oroperating system feature todisable the user interface for thesettings they configure

Refreshes policy settings at a

regular interval @90min

Refreshes preferences using the

same interval as Group Policysettings by default


22/36

Group Policy Preference Features

Used to configure additionaloptions that control thebehavior of a Group Policypreference item

Common TabTargeting Features

Determines to which users andcomputers a preferenceitem applies


23/36

Deploying Group Policy Preferences

Windows Server 2008 includes Group Policypreferences by default as part of theGroup Policy Management Console (GPMC)

Windows Server 2008 includes Group Policy preferences by

default as part of the GPMC

Group Policy preferences Client side extension (CSE)must be deployed to any client computer to which you want todeploy preferences

Demonstration: Deploying Group


24/36

Demonstration: Deploying GroupPolicy Preferences

In this demonstration, you will see how to deploy GroupPolicy preferences


25/36

Lesson 5: Deploying Software Using Group Policy

Options for Deploying and Managing Software UsingGroup Policy

How Software Distribution Works

Options for Installing Software

Demonstration: Configuring Software Distribution

Options for Modifying the Software Distribution

Demonstration: Modifying Software Distribution

Maintaining Software Using Group Policy

Discussion: Evaluating the Use of Group Policy toDeploy Software

Options for Deploying and Managing Software


26/36

Preparation

1

Options for Deploying and Managing SoftwareUsing Group Policy

Deployment

1.0

2

Maintenance

2.0

3

Removal

4


27/36

How Software Distribution Works

Windows Installer=.msi

(.msi: clean install/remove;english.mst(transform): maximum user interface

But .exe: unclean install/remove)

Windows Installer service

Fully automates thesoftware installation andconfiguration process

Modifies or repairs an

existing applicationinstallation

Windows Installer service

Fully automates thesoftware installation andconfiguration process

Modifies or repairs an

existing applicationinstallation

Windows Installer package containsInformation about installing oruninstalling an application

An .msi file and any external sourcefiles

Summary information about the

applicationA reference to an installation point

Windows Installer package containsInformation about installing oruninstalling an application

An .msi file and any external sourcefiles

Summary information about the

applicationA reference to an installation point

Benefits of

Using

Windows

Installer

Custominstallations

Resilientapplications

Clean removal

Custominstallations

Resilientapplications

Clean removal

O i f lli S f


28/36

SoftwareDistribution Point

SoftwareDistribution Point

Options for Installing Software:1.Assign: mandatory, 2. Publish: optional

Publish software usingdocument activation

Publish software usingdocument activation

?

Publish softwareusing Add or

Remove Programs

Publish softwareusing Add or

Remove Programs

Assign softwareduring Computer

Configuration

Assign softwareduring Computer

Configuration

Assign softwareduring User

Configuration

Assign softwareduring User

Configuration


29/36

Demonstration: Configuring Software Distribution

In this demonstration, you will see how to deploy asoftware package through both assigning and publishing


30/36

Options for Modifying the Software Distribution

Software can be categorized in the Add Programs applet

Software deployment can be customized using MST files

File extensions can be associated with particular applications

Options:


31/36

Demonstration: Modifying Software Distribution

In this demonstration, you will see how to:

Create software categories

Configure software distribution properties


32/36

Maintaining Software Using Group Policy

Mandatory upgrade Users can use only

the upgraded version

Optional upgrade Users can decidewhen to upgrade

Selective upgrade You can select

specific users for anupgrade

2.0

1.02.0

2.0

1.0

Deploy nextversion of the

application

Deploy nextversion of the

application

2.0

Discussion: Evaluating the Use of Group Policy to


33/36

Discussion: Evaluating the Use of Group Policy toDeploy Software

What are the advantages of using Group Policy todeploy software?

What are the limitations?

What additional features are provided by other softwaredistribution packages?

Lab: Configuring User Environments Using


34/36

Lab: Configuring User Environments UsingGroup Policy

Exercise 1: Configuring Scripts and Folder Redirection

Exercise 2: Configuring Administrative Templates

Exercise 3: Configuring Preferences

Exercise 4: Verifying GPO Application

Logon information

Virtual machine NYC-DC1, NYC-CL1

User name AdministratorPassword Pa$$w0rd

Estimated time: 60 minutes


35/36

Lab Review

You have configured folder redirection for an OU, but noneof the users folders are being redirected to the network

location. When you look in the root folder, you observethat a subdirectory named for each user has been created,but they are empty. What is the problem?

You have an .MSI file for a small application that you wantglobally available to all users and computers in an OU.

What steps would you take to accomplish this?


36/36

Module Review and Takeaways

Considerations

Review questions

6425A_06 Config User Environment Using Group Policy

Documents

Transcript of 6425A_06 Config User Environment Using Group Policy