ACTIVE DIRECTORY GROUP POLICY MAEDS Spring PD Day 2012 Nicholas A. Hay Jefferson Schools

LOGIN / LOGOFF / STARTUP / SHUTDOWN SCRIPTS

WIRELESS POLICY

FOLDER REDIRECTION  User > Policies > Windows Settings > Folder Redirection

GP PREF’S - ITEM LEVEL TARGETING  Allows fine-tuning of where item is applied.  Reduce GPO's where a few settings may be different.  Can eliminate (99.9% of the time) scripts completely and easy to implement changes  Be sure to check the run in logged-on user’s security context when using User Policies or the PC will use the System account to process object.

GP PREF’S – DRIVE MAPPINGS

GP PREFERENCES – ACTION TYPES  Create  Replace  Deletes and recreate the item.  Update  This is usually the option you will use when defining items in Preferences. This just refreshes the object rather than deleting and recreating it.  Delete

GP PREF’S – DRIVE MAPPINGS

GP PREF’S - SHORTCUTS

GP PREF’S – PRINTERS  Printers can be added to list in one of three ways  Shared Printer(only available in User Configuration)  TCP/IP Printer(available in Computer and User Configuration)  Local Printer (available in Computer and User Configuration)

GP PREF’S – PRINTERS

GP PREF’S – REGISTRY

GP PREF’S – POWER SETTINGS

HOW TO: WIN 7AUTO LOGIN  Create a GPO and apply it to an OU. Any computers you add to this OU will get this policy after a reboot.  There are 4 registry keys that need to be set at a computer level in the Registry GP Preferences 

ADD ADDITIONAL GPO TEMPLATES  Software vendors have GPO Templates that can be added into GP to be managed.  You can create GPO Templates as well  Two ways to add:  To add a template go under Computer or User Config and right click on Administrative Templates and select Add/ Remove Templates…  Copy the template files on the computer C:\Windows\PolicyDefinitions

ADDING OFFICE 2010 TEMPLATES  Download at the following link below:   There are two types of template formats  ADM  ADMX (XML version of ADM)  Pre Windows Vista computers cannot load this in the GP Editor programs, but the policies will still be applied to them from the Domain server.  These files are language neutral. The descriptions of each policy in these files are stored in the language folder (en-us is the English language) and are needed for the policies when uploading

GP CENTRAL REPOSITORY  GP Templates may not be available on all computers or servers. This is to due with the computers, by default, using a local repository of the GP Templates.  Local copies of the GP templates will be used unless a central repository is on the server.  If you are creating a GPO on a computer that doesn’t have a particular template you need to add it manually to the local computer to view the properties of this.  How to creating a Central Repository  Windows Vista and Server 2008 and up support this.   Location  Local Repository:C:\Windows\PolicyDefinitions  Central Repository:C:\Windows\SYSVOL\domain\Policies (on domain server)

OFFICE OUTLOOK AUTO CONFIG

OFFICE PRIVACY TRUST CENTER

RESOURCES   Jeremy Mosowitz has some online classes, for a fee, that are very helpful to become familiar with Group Policy.   Group Policy for Beginners page