Section 13: Configuring Group Policy Preferences Introducing Group Policy Preferences Comparing Preferences and Policy Settings Configuring Preferences Settings Managing Windows Environments with Group Policy

© 2013 Global Knowledge Training LLC. All rights reserved. Section Objectives After completing this section, you will be able to: Describe the purpose of Group Policy Preferences Explain the differences between Preferences and Policy settings Identify the settings that you can configure in the Computer Configuration and User Configuration sections of the Group Policy Management Console Describe the Windows and Control Panel settings List the advanced Preferences configuration options that are common to all GPO Preferences 13-2

© 2013 Global Knowledge Training LLC. All rights reserved. Introducing Group Policy Preferences 13-3 Group Policy Preferences Features Deploying Group Policy Preferences

© 2013 Global Knowledge Training LLC. All rights reserved. Group Policy Preferences Feature Group policies do not cover all characteristics of the operating system. Logon scripts have filled the void in the past. Preferences include the ability to create as well as configure settings. 13-3

© 2013 Global Knowledge Training LLC. All rights reserved. Deploying Group Policy Preferences Group Policy Preferences are included with Windows Server 2008 and later operating systems Windows Vista SP1 includes Group Policy Preferences Group Policy Preferences are also available through a downloadable update for Windows Server 2003 and Windows XP 13-4

© 2013 Global Knowledge Training LLC. All rights reserved. Comparing Preferences and Policy Settings FeaturePreferencesPolicies Enforcement of settings User can change preferences. Refresh is optional. User cannot change settings. Settings are refreshed regularly. Ease of administration New settings can be imported or created. New settings require editing of administrative templates. Files and folders New files and folders can be created. Existing files can be modified. File and folder management is not possible. Application Preferences are permanent. Policy removal does not revert preferences. Settings are temporary. Policy removal reverts settings. Filtering Granular targeting is built in. WMI queries for filtering. 13-5

© 2013 Global Knowledge Training LLC. All rights reserved. Configuring Preferences Settings 13-6 Computer and User Configuration Sections Windows Settings Control Panel Settings Mapping Drives Common Settings Item Level Targeting

© 2013 Global Knowledge Training LLC. All rights reserved. Computer and User Configuration Sections Preference items are available for both the Computer Configuration and User Configuration sections. User Preferences Computer Preferences 13-6

© 2013 Global Knowledge Training LLC. All rights reserved. Windows Settings SettingDescription ApplicationsExtensible for ISVs to create simple Group Policy preference settings for their applications Drive MapsCreate, modify, or delete mapped drives EnvironmentCreate, modify, or delete environment variables FilesCopy, modify the attributes of, replace, or delete files FoldersCreate, modify, or delete folders Ini FilesModify.ini or.inf files RegistryCopy registry settings to other computers and create, replace, or delete registry settings Network SharesCreate, modify, or remove shares ShortcutsCreate, modify, or delete shortcuts 13-7

© 2013 Global Knowledge Training LLC. All rights reserved. Control Panel Settings SettingDescription Data SourcesManage ODBC connections DevicesManage device drivers Folder OptionsConfigure folder options and file extension associations Internet SettingsManage Windows Internet Explorer settings Local Users and GroupsCreate, modify, or delete local users and groups Network OptionsManage VPN and DUN connections Power OptionsConfigure power management settings PrintersManage printer connections Regional OptionsModify regional settings Scheduled TasksManage scheduled tasks ServicesManage service behavior Start MenuConfigure Start menu settings 13-8

© 2013 Global Knowledge Training LLC. All rights reserved. Mapping Drives One example of using Preferences is for mapping network drives. This eliminates the need for logon scripts to map drives Preferences drive mapping is flexible enough to take into account existing drive letters that may conflict. 13-9

© 2013 Global Knowledge Training LLC. All rights reserved. Common Settings The application of preferences can be controlled by using the “common” properties of a preference item. Common settings include: Error handling Security context Item removal Reapplication Item-level targeting 13-10

© 2013 Global Knowledge Training LLC. All rights reserved. Item-Level Targeting Multiple conditions can be configured to restrict the application of the preference item. Creating and using the condition is simpler and easier than using a WMI query

© 2013 Global Knowledge Training LLC. All rights reserved. Summary Group Policy Preferences allow administrators to configure a broad array of settings, which were previously available only through logon scripts based on batch files or VBScript

© 2013 Global Knowledge Training LLC. All rights reserved. Summary (cont.) The following table compares Preferences and Policy settings FeaturePoliciesPreferences Enforcement of settings User cannot change settings. Settings are refreshed regularly. User can change preferences. Refresh is optional. Ease of administration New settings require editing of administrative templates. New settings can be imported or created. Files and folders File and folder management is not possible. New files and folders can be created. Existing files can be modified. Application Settings are temporary. Policy removal reverts settings. Preferences are permanent. Policy removal does not revert preferences. Filtering WMI queries for filtering. Granular targeting is built in.

© 2013 Global Knowledge Training LLC. All rights reserved. Summary (cont.) In the Group Policy Management Console, the Computer Configuration section, you can configure these settings: Network Shares Services In the Computer Configuration section, you can configure these settings: Applications Drive Maps Internet Settings Start Menu 13-13

© 2013 Global Knowledge Training LLC. All rights reserved. Summary (cont.) The following table describes the Windows Group Policy Preferences settings SettingDescription ApplicationsExtensible for ISVs to create simple Group Policy preference settings for their applications. Drive MapsCreate, modify, or delete mapped drives EnvironmentCreate, modify, or delete environment variables FilesCopy, modify the attributes of, replace, or delete files FoldersCreate, modify, or delete folders Ini FilesModify.ini or.inf files RegistryCopy registry settings to other computers and create, replace, or delete registry settings Network SharesCreate, modify, or remove shares ShortcutsCreate, modify, or delete shortcuts

© 2013 Global Knowledge Training LLC. All rights reserved. Summary (cont.) The following table describes the Control Panel Group Policy Preferences settings SettingDescription Data SourcesManage ODBC connections DevicesManage device drivers Folder OptionsConfigure folder options and file extension associations Internet SettingsManage Windows Internet Explorer settings Local Users and GroupsCreate, modify, or delete local users and groups Network OptionsManage VPN and DUN connections Power OptionsConfigure power management settings PrintersManage printer connections Regional OptionsModify regional settings Scheduled TasksManage scheduled tasks ServicesManage service behavior Start MenuConfigure Start menu settings

© 2013 Global Knowledge Training LLC. All rights reserved. Summary (cont.) The advanced configuration options are available on the Common tab of the Properties sheet for each preference setting. Some of the options that are common to all GPO Preferences are: Error handling Security context Item removal Reapplication Item-level targeting 13-14

© 2013 Global Knowledge Training LLC. All rights reserved. Knowledge Check 1.What are the differences between GPO Policies and GPO Preferences? (Choose all that apply.) a.Preferences are not enforced. b.Preferences do not revert when the policy is removed. c.Preferences targeting requires a WMI query. d.Preferences allow you to create or modify folders and files

© 2013 Global Knowledge Training LLC. All rights reserved. Knowledge Check 2.What is the purpose of Group Policy Preferences? Group Policy Preferences allow administrators to configure a broad array of settings, which were previously available only through logon scripts based on batch files or VBScript

© 2013 Global Knowledge Training LLC. All rights reserved. Knowledge Check (cont.) 3.Which of the following settings are located in the Computer Configuration section of the Group Policy Management Console? (Choose all that apply.) a.Start Menu b.Drive Maps c.Applications d.Services 13-15

© 2013 Global Knowledge Training LLC. All rights reserved. Knowledge Check (cont.) 4.List the advanced Preferences configuration options that are common to all items in Group Policy.  Error handling  Security context  Item removal  Reapplication  Item-level targeting 13-15

© 2013 Global Knowledge Training LLC. All rights reserved. Knowledge Check (cont.) 5.Describe each of the following Group Policy Preferences settings. Registry: Copy registry settings to other computers and create, replace, or delete registry settings Drive Maps: Create, modify, or delete mapped drives Folder Options: Configure folder options and file extension associations Network Options: Manage VPN and DUN connections 13-15