2. Management tools GPOE & GPMC Group Policy Preferences Group Policy Service GP shared service More stable and strengthened Service Group Policy Templates New format for the templates (ADMX, ADML) Network Location Awareness (NLA) The NLA service delivers the network information Applications can interface/query NLA to get information about the network state. Group Policy Logging Admin log Logs Applications and Services Event logs is XML-based New tool - GPOLogView Group Policy Central Store Central store for ADMX files Improvements in GPOs Multiple Local GPOs Group Policy Settings More than 800 new policies in Vista GP extensions for the new Vista capabilitiesNLA Windows Vista Windows Server 2008 ADMADMX GPO’s LGPO Admin User GP utilisateur GP Admin/Non-Admin Policy PC local DC FRS/DFS-R SysVo l ADMX ADML + Policies + + GUID ADM Policy Definitions ADMX, ADML Files +

3. Increased granularity in managing local policies E.g. easy distinction between admin and non-admin users Execution sequence Local Policy (user and computer parts) secpol.msc Local GPOs admin/non-admin (user parts only) MMC | Add-remove snap-in | Group Policy Object Editor | select group Local GPOs user-specific MMC | Add-remove snap-in | Group Policy Object Editor | select user Local GPOs still apply before domain GPOs and have thus lower priorities

4. Improved network bandwidth detection NLA vs. ICMP/PING Policy update for users and systems depends on DC availability New scenarios VPN session Recovering from hibernation Long disconnected session …

5. Based on Windows Eventing 2 new event logs “Journal Windows” “Journal des Applications et des Services” Filters, tasks New tools GPlogView GPinventory

6. More than 800 new GPOs and additional categories to organize them Search & Filters in GPOs On title, explanatory texts, comments, managed policies, platform… Alphabetic listing of all GPOs Comments Annotate GPOs or annotate settings Starter GPOs Predefined scenarios/Best practices Recommended settings Basis for the creation of new GPOs

7. XML-based policy definition files Central store of ADMX files Manage both ADMX and ADM files Convert ADM files to ADMX format Multilanguage support : ADMXL

8. Reduces the size of the Sysvol folder and reduces replication traffic between DCs Does not require Windows Server 2008 DCs, works with Windows Server 2003/R2 Needs to be manually created: %systemroot%\sysvol\domain\policies\PolicyD efinitions Next, copy the ADMX and ADML files from the following location on a Windows Server 2008 computer: %systemroot%\policyDefinitions

9. Ex-PolicyMaker (Desktop Standard) Windows Server 2008 et RSAT Extends the number of settings [Greatly] Extends the number of functionalities Rich & easy to use interface You will no longer live without it !

10. Improves IT productivity Reduces need for logon scripts Limits configuration errors Enhances end-user satisfaction Minimizes image maintenance Reduces overall image count

11. Group Policy PreferencesGroup Policy Settings Enforcement Preferences are not enforced User interface is not disabled Can be refreshed or applied once Settings are enforced User interface is disabled Settings are refreshed Flexibility Easily create preference items for registry settings, files, and so on Import individual registry settings or entire registry branches Adding requires application support and creating administrative templates Cannot create policy settings to manage files, folders, and so on Local Policy Not available in local Group PolicyAvailable in local Group Policy Awareness Supports non-Group Policy-aware appsRequires Group Policy-aware applications Storage Original settings are overwritten Removing the preference item does not restore the original setting Original settings are not changed Stored in registry Policy branches Removing setting restores original settings Targeting and Filtering Targeting is granular, with a user interface for each type of targeting item Supports targeting at the individual preference item level Filtering is based on Windows Management Instrumentation (WMI) and requires writing WMI queries Supports filtering at a GPO level User Interface Provides a familiar, easy-to-use interface for configuring most settings Provides an alternative user interface for most policy settings

12. Create Create dynamic drive mapping to network share Create Create dynamic drive mapping to network share Replace Delete and recreate mapped drive Replace Delete and recreate mapped drive Update Modify settings of an existing mapped drive Update Modify settings of an existing mapped drive Delete Delete mapped drive or mapped drives Delete Delete mapped drive or mapped drives

14. New GPOs created from Vista/2008 can only be managed from GPMC on Vista/2008. You can use GPMC on Vista/2008 to manage all GPOs, including older ones created on XP/2003. GPMC on Vista/2008 can be used to work with previous ADM files. Vista SP1 removes GPMC, to get it back, install RSAT http://support.microsoft.com/kb/941314 http://support.microsoft.com/kb/941314 Group Policy preferences updates for XP/2003/Vista http://support.microsoft.com/kb/943729 http://support.microsoft.com/kb/943729

15. Ex-GPOVault (DesktopStandard) MDOP component Functionalities Offline Editing, Check In/Out Version control; History, Roll-back Delegation, workflows, notifications Audit Reports (differential reports between GPOS, between versions, between states…)

16. http://go.microsoft.com/fwlink/?LinkId=109520

17. Make Cscript.exe default scripting host Lib_CommonGPMCFunctions.js should be in same location as scripts Import and export GPOs Copy and paste GPOs Back up and restore GPOs Search for existing GPOs Group Policy Modeling Group Policy Results Support for migration tables Reporting capabilities Import and export GPOs Copy and paste GPOs Back up and restore GPOs Search for existing GPOs Group Policy Modeling Group Policy Results Support for migration tables Reporting capabilities

18. IGPMGPO interface CopyTo GenerateReport IGPMRSOP interface CreateQueryResults GenerateReport http://msdn.microsoft.com/en-us/library/aa814147(VS.85).aspx

19. © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. “Thank you for your attention” Luc