1. Managing User Settings with Group Policy
Presentation: 60 minutes
Lab: 45 minutes
After completing this module, students will be able to:
Implement Administrative Templates.
Configure Folder Redirection and scripts.
Configure Group Policy preferences.
Required materials
To teach this module, you need the Microsoft Office PowerPoint file 10969A_06.pptx.
Important: We recommend that you use PowerPoint 2007 or a newer version to display the slides for this course. If you use PowerPoint Viewer or an older version of PowerPoint, all the features of the slides might not display correctly.
Preparation tasks
To prepare for this module:
Read all of the materials for this module.
Practice performing the demonstrations.
Practice performing the labs.
Work through the Module Review and Takeaways section, and determine how you will use this section to reinforce student learning and promote knowledge transfer to on-the-job performance.
As you prepare for this class, it is imperative that you complete the labs yourself, so that you understand how they work and the concepts that each covers. This enables you to provide meaningful hints to students who may find themselves stuck during a lab, and it also will help guide your lecture to ensure that you cover the concepts that the labs cover.
Module 6
Managing User Settings with Group Policy

2. Configuring Group Policy Preferences
10969A
Module Overview
6: Managing User Settings with Group Policy
Configuring Group Policy Preferences

3. Lesson 1: Implementing Administrative Templates
6: Managing User Settings with Group Policy
Demonstration: Configuring Settings with Administrative Templates

4. What Are Administrative Templates?
6: Managing User Settings with Group Policy
Administrative Templates give you with the ability to control the environment of the operating system and the user experience:
Administrative Templates sections for computers are:
Control Panel
Network
Printers
System
Windows-based components
Administrative Templates sections for users are:
Desktop
Start menu and taskbar
Each of these main sections contain many subfolders to further organize settings
Explain that Administrative Templates are the primary means of configuring the client computer’s registry settings through Group Policy. Explain that Administrative Templates are a repository of registry-based changes. By using the Administrative Templates sections of the GPO, you can deploy modifications to both the computer (the HKEY_LOCAL_MACHINE hive in the registry) and the user (the HKEY_CURRENT_USER hive in the registry) portions of the registry. Mention that many of the new settings only apply to newer version of Windows operating systems.
Discuss how you can use Administrative Templates to control the environment of the operating system and user experience. As an example, explain how you can limit or prohibit user access to Control Panel and desktop items.
Mention that you can add custom Administrative Templates with the Group Policy Management Console (GPMC).

5. What Are ADM and ADMX Files?
6: Managing User Settings with Group Policy
ADM files:
Are copied into every GPO in SYSVOL
Are difficult to customize
ADMX files:
Include language-neutral ADML files that provide the localized language
Are not stored in the GPO
Are extensible through XML
One potential disadvantage of ADM files is that, depending on client version, they can copy into every created Group Policy Object (GPO) and consume about 3 megabytes (MB) of space. This can lead to SYSVOL bloat, a term that describes how the System Volume (SYSVOL) folder can grow very large because of the GPOs that keep repetitive copies of the same ADM files.

6. The Central Store The central store: ADMX Files Windows 8 Workstation
6: Managing User Settings with Group Policy
The central store:
Is a central repository for ADMX and ADML files
Is stored in SYSVOL
Must be created manually
Is detected automatically by Windows Vista, Windows 7, Windows 8, or Windows Server 2008 and Windows Server 2012
Explain that a central store provides a central repository for ADMX files. A central store is stored in SYSVOL, and you must create and update a central store manually. Normal Active Directory Domain Services (AD DS) replication ensures that the central store copies to all domain controllers.
Explain that the central store provides consistency for administrators who edit GPOs from multiple Windows 7 or Windows 8 workstations.
Consider doing a short demonstration of how to create a central store.
Windows 8
Workstation
ADMX Files
Domain Controller
with SYSVOL

7. Discussion: Practical Uses of Administrative Templates
6: Managing User Settings with Group Policy
How do you currently provide desktop security currently?
How much administrative access do users have to their systems?
Which Group Policy settings will you find useful in your organization?
Provide students with 15 minutes to look through the Administrative Templates in a GPO. Tell them to note the settings that would be most useful in their current environments. Point out some of the lesser-known settings that might be of general interest. For example, the settings regarding driver and device installation, and removable-storage access typically would be of interest to administrators. Be prepared to answer questions about individual settings.
Ask students to share the reasons that they currently use GPOs and logon scripts.
Question
How do you provide desktop security currently?
How much administrative access do users have to their systems?
Which Group Policy settings will you find useful in your organization?

8. Demonstration: Configuring Settings with Administrative Templates
6: Managing User Settings with Group Policy
In this demonstration, you will see how to:
Filter Administrative Template policy settings
Apply comments to policy settings
Add comments to a GPO
Create a new GPO by copying an existing GPO
Create a new GPO by importing settings that were exported from another GPO
Leave the virtual machines running for subsequent demonstrations.
Preparation Steps
You require the 10969A-LON-DC1 and 10969A-LON-CL1 virtual machines for this demonstration. Sign in as Adatum\Administrator with the password of Pa$$w0rd.
Demonstration Steps
Filter Administrative Templates policy settings
Switch to LON-DC1.
Sign in as Adatum\Administrator with the password Pa$$w0rd.
From Server Manager, click Tools, and then click Group Policy Management.
In the console tree, expand Forest: Adatum.com, Domains, and Adatum.com, and then click the Group Policy Objects container.
Right-click the Group Policy Objects container, and then click New.
In the New GPO dialog box, in the Name field, type GPO1, and then click OK.
In the details pane, right-click GPO1, and then click Edit. The Group Policy Management Editor appears.
In the console tree, expand User Configuration, expand Policies, and then click Administrative Templates.
Right-click Administrative Templates, and then click Filter Options.
Select the Enable Keyword Filters check box.
In the Filter for word(s) text box, type screen saver.
In the drop-down box next to the text box, select All or Any, and then click OK. Administrative Templates policy settings filter to show only those that contain the words screen saver. Spend a few moments examining the settings that you have found.
(More notes on the next slide)

9. 6: Managing User Settings with Group Policy
In the console tree, under User Configuration, right-click Administrative Templates, and then click Filter Options.
Clear the Enable Keyword Filters check box.
In the Configured drop-down list box, select Yes, and then click OK. Administrative Templates policy settings filter to show only those that have been configured as enabled or disabled. No settings have been enabled.
In the console tree, under User Configuration, right-click Administrative Templates, and then clear the Filter On option.
Add comments to a policy setting
In the console tree, expand User Configuration, Policies, Administrative Templates, expand Control Panel, and then click Personalization.
In the details pane, double-click the Enable screen saver policy setting.
In the Comment section, type Corporate IT Security Policy implemented with this policy in combination with Password Protect the Screen Saver, and click Enabled to enable the policy, and then click Apply and then OK.
Double-click the Password protect the screen saver policy setting, and then click Enabled.
In the Comment section, type Corporate IT Security Policy implemented with this policy in combination with Enable screen saver, and then click Apply and then OK.
Add comments to a GPO
In the console tree of the Group Policy Management Editor, right-click the root node, GPO1 [LON- DC1.ADATUM.COM], and then click Properties.
Click the Comment tab.
Type Adatum corporate standard policies. Settings are scoped to all users and computers in the domain. Person responsible for this GPO: your name. This comment appears on the Details tab of the GPO in the Group Policy Management Console.
Click OK, and then close the Group Policy Management Editor.
(More notes on the next slide)

10. 6: Managing User Settings with Group Policy
Create a new GPO by copying an existing GPO
In the Group Policy Management Console tree, click the Group Policy Objects container, right-click GPO1, and then click Copy.
Right-click the Group Policy Objects container, click Paste, and then click OK twice.
Create a new GPO by importing settings that were exported from another GPO
In the Group Policy Management Console tree, click the Group Policy Objects container, right-click GPO1, and then click Back Up.
In the Location: box, type c:\, and then click Back Up.
When the backup finishes, click OK.
In the Group Policy Management Console tree, right-click the Group Policy Objects container, and then click New.
In the Name: box, type ADATUM Import, and then click OK.
In the Group Policy Management Console tree, right-click the ADATUM Import GPO, and then click Import Settings. The Import Settings Wizard appears.
Click Next three times.
Select GPO1, and then click Next two times.
Click Finish and then click OK.
Close the Group Policy Management Console.

11. Lesson 2: Configuring Folder Redirection and Scripts
6: Managing User Settings with Group Policy
Demonstration: Configuring Scripts with GPOs

12. What Is Folder Redirection?
6: Managing User Settings with Group Policy
Folder redirection is a feature that allows folders to be located on a network server, but appear as if they are located on a local drive
Folders that can be redirected in Windows Vista, Windows 7, and Windows 8 are:
Desktop
Start Menu
Documents
Pictures
AppData\Roaming
Contacts
Downloads
Favorites
Saved Games
Searches
Links
Music
Videos
Explain some of the advantages of Folder Redirection, including:
Data appears to follow the user when the user logs on to different computers.
Data stored on servers is more likely to back up.
Local profile sizes are reduced.
Less data to transfer in case of client machine replacement.
Mention that the Documents folder can include all of its own subfolders, such as Music, Pictures, and Video.
Consider demonstrating the folders that you can redirect.

13. Settings for Configuring Folder Redirection
10969A
Settings for Configuring Folder Redirection
6: Managing User Settings with Group Policy
Folder Redirection configuration options:
Use Basic Folder Redirection when all users save their files to the same location
Use Advanced Folder Redirection when the server hosting the folder location is based on group membership
Use the Follow the Documents folder to force certain folders to become subfolders of Documents
Target folder location options:
Create a folder for each user under the root path
Redirect to the following location
Redirect to the local user profile location
Redirect to the user’s home directory (Documents folder only)
Accounting
Users
Discuss the difference between Basic and Advanced redirection settings. Discuss the four options on the target folder location’s drop-down list box. Explain the options on the Settings tab. Mention that the default option is to grant the user exclusive rights, and to move the folder’s current contents, in the case of Documents.
Discuss the options available when the policy no longer applies to the user, and mention that the default option is to leave the folder in the shared location.
Question
Users in the same department often log on to different computers. They need access to their Documents folders. They also need data to be private. What Folder Redirection setting would you choose?
Answer
Create a folder for each user under the root path. This creates a Documents folder to which only the user has access.
Accounts
A-M
Accounts
N-Z
Accounting
Managers
Amy
Anne

14. Security Settings for Redirected Folders
10969A
Security Settings for Redirected Folders
6: Managing User Settings with Group Policy
NTFS permissions for root folder
Share permissions for root folder
NTFS permissions for each user’s redirected folder
Stress that students must create the initial network-share root folder manually, and then assign permissions. The Folder Redirection feature then creates the appropriate subfolders, and applies the appropriate permissions.
Describe the minimum permissions required for redirected folders. Mention that these are minimum permissions, and that different environments might require different permission sets.

15. Demonstration: Configuring Folder Redirection
6: Managing User Settings with Group Policy
In this demonstration, you will learn how to:
Create a shared folder for Folder Redirection
Create a GPO to redirect the Documents folder
Test Folder Redirection
Leave the virtual machines running for subsequent demonstrations.
Preparation Steps
You require the 10969A-LON-DC1 and 10969A-LON-CL1 virtual machines for this demonstration. Sign in as Adatum\Administrator with the password of Pa$$w0rd.
Demonstration Steps
Create a shared folder
On LON-DC1, on the taskbar, click File Explorer.
In the navigation pane, click This PC.
In the details pane, double-click Local Disk (C:), and then on the Home tab, click New folder.
In the Name box, type Redirect, and then press Enter.
Right-click the Redirect folder, click Share with, and then click Specific people.
In the File Sharing dialog box, click the drop-down arrow, select Everyone, and then click Add.
For the Everyone group, click the Permission Level drop-down arrow, and then click Read/Write.
Click Share, and then click Done.
Close the Local Disk (C:) window.
Create a GPO to redirect the Documents folder
Click Start.
Click Administrative Tools, and then double-click Group Policy Management.
Expand Forest: Adatum.com, and then expand Domains.
Right-click Adatum.com, and then click Create a GPO in this domain and Link it here.
In the New GPO dialog box, in the Name box, type Folder Redirection, and then click OK.
Expand Adatum.com, right-click Folder Redirection, and then click Edit.
(More notes on the next slide)

16. 6: Managing User Settings with Group Policy
In the Group Policy Management Editor, under User Configuration, expand Policies, expand Windows Settings, and then expand Folder Redirection.
Right-click Documents, and then click Properties.
In the Document Properties dialog box, on the Target tab, next to Setting, click the drop-down arrow, and then select Basic-Redirect everyone’s folder to the same location.
Ensure that the Target folder location box is set to Create a folder for each user under the root path.
In the Root Path box, type \\LON-DC1\Redirect, and then click OK.
In the Warning dialog box, click Yes.
Close all open windows.
Test Folder Redirection
Sign in to LON-CL1 as Adatum\Administrator with the password Pa$$w0rd.
On Start screen, type cmd.exe, and then press Enter.
At the command prompt, type the following command, and then press Enter:
gpupdate/force Y
From Start screen, click Desktop.
Right-click the desktop, and then click Personalize.
In the navigation pane, click Change desktop icons.
In Desktop Icon Settings, select the User’s Files check box, and then click OK.
(More notes on the next slide)

17. 6: Managing User Settings with Group Policy
On the desktop, double-click Administrator.
Right-click Documents, and then click Properties.
In the My Document Properties dialog box, note that the location of the folder is now the Redirect network share in a subfolder named for the user.
Sign out of LON-CL1.

18. Group Policy Settings for Applying Scripts
6: Managing User Settings with Group Policy
You can use scripts to perform many tasks, such as clearing page files or mapping drives, and clearing temp folders for users
You can assign Group Policy script settings to assign:
For computers:
Startup scripts
Shutdown scripts
For users:
Logon scripts
Logoff scripts
Explain that you cannot set all configuration settings by using Group Policy settings. You can use scripts to perform many tasks, such as clearing page files or mapping drives, and clearing temporary folders for users. Describe the four types of scripts and when the scripts run.
Describe the difference between synchronous and asynchronous script processing. Explain that logon scripts run asynchronously by default, and startup scripts run synchronously by default, but that you can modify that behavior. Mention that if scripts are set to run synchronously, then a failed script can cause a computer to stop responding.

19. Demonstration: Configuring Scripts with GPOs
6: Managing User Settings with Group Policy
In this demonstration, you will learn how to:
Create a logon script to map a network drive
Create and link a GPO to use the script, and store the script in the Netlogon share
Log on to a client computer and test the results
Leave the virtual machines running for subsequent demonstrations.
Preparation Steps
You require the 10969A-LON-DC1 and 10969A-LON-CL1 virtual machines for this demonstration. Sign in as Adatum\Administrator with the password of Pa$$w0rd.
Demonstration Steps
Create a logon script to map a network drive
On LON-DC1, point to the lower right-hand corner, and then click Start.
On the Start screen, type Notepad, and then press Enter.
In Notepad, type the following command:
Net use t: \\LON-dc1\Redirect
Click the File menu, and then click Save As.
In the Save As dialog box, in the File name box, type Map.bat.
In the Save as type: list, select All Files (*.*).
In the navigation pane, click Desktop, and then click Save.
Close Notepad.
On the desktop, right-click the Map.bat file, and then click Copy.
Create and link a GPO to use the script, and store the script in the Netlogon share
Open Server Manager, click Tools, and then click Group Policy Management.
Expand Forest: Adatum.com, and then expand Domains.
Right-click Adatum.com, and then click Create a GPO in this domain and link it here.
In the New GPO dialog box, in the Name box, type DriveMap, and then click OK.
Expand Adatum.com, right-click the Drivemap GPO, and then click Edit.
(More notes on the next slide)

20. 6: Managing User Settings with Group Policy
In the Group Policy Management Editor, under User Configuration, expand Policies, expand Windows Settings, and then click Scripts (Logon/Logoff).
In the details pane, double-click Logon.
In the Logon Properties dialog box, click Show Files. This opens the Netlogon share in Computer.
In the details pane, right-click a blank area, and then click Paste.
Close the Logon window.
In the Logon Properties dialog box, click Add.
In the Add a Script dialog box, click Browse.
Click the Map.bat script, and then click Open.
Click OK twice to close all dialog boxes.
Close the Group Policy Management Editor and the Group Policy Management Console.
Log on to a client computer and test the results
On LON-CL1, sign in as Adatum\Administrator with the password Pa$$word.
Click Desktop, and on the taskbar, click File Explorer.
Verify that you have a drive mapped to \\Lon-dc1\Redirect by examining the navigation pane.
Sign out of LON-CL1.

21. Lesson 3: Configuring Group Policy Preferences
10969A
Lesson 3: Configuring Group Policy Preferences
6: Managing User Settings with Group Policy
Demonstration: Configuring Group Policy Preferences

22. What Are Group Policy Preferences?
6: Managing User Settings with Group Policy
Group Policy preferences extensions expand the range of configurable settings within a GPO
Group Policy preferences:
Enable IT professionals to configure, deploy, and manage settings that were not manageable by using Group Policy
Are supported natively on Windows Server°2008 and Windows Vista SP2
Can be created, deleted, replaced, or updated
You now can process Group Policy preferences because of several new Group Policy client-side extensions that expand the range of configurable settings in a GPO. These new preference extensions are included in the Group Policy Management Editor window of the GPMC. Examples of the new Group Policy preference extensions include the following:
Folder Options
Drive Maps
Printers
Scheduled Tasks
Services
Start Menu

23. Comparing Group Policy Preferences and GPO Settings
6: Managing User Settings with Group Policy
Group Policy settings
Group Policy preferences
Strictly enforce policy settings by writing the settings to area of the registry that standard users cannot modify
Are written to the normal locations in the registry that the application or operating system feature uses to store the setting
Typically disable the user interface for settings that Group Policy is managing
Do not cause the application or operating system feature to disable the user interface for settings they configure
Refresh policy settings at a regular interval
Refresh preferences by using the same interval as Group Policy settings by default
The main difference between policy settings and preference settings is that preference settings are not enforced. This means that the end user can change any preference setting that applies through Group Policy, but not policy settings, unless the user can edit the registry.
Preference items are intended to supplement policy settings, and you can configure the following as preference items:
Settings that cannot configure through policy settings.
Settings that have limitations when they are configured through policy settings.

24. Features of Group Policy Preferences
6: Managing User Settings with Group Policy
Targeting Features
Common Tab
Group Policy preferences provide better targeting through preference item-level targeting and action modes. In addition to providing significantly more coverage, better targeting, and easier management, Group Policy preferences enable you to deploy settings to client computers without restricting users from changing the settings. This gives you the flexibility to decide whether to enforce specific settings. You can deploy settings that you do not want to enforce by using Group Policy preferences.
Is used to configure additional options that control the behavior of a Group Policy preference item
Determines to which users and computers a preference item applies

25. Demonstration: Configuring Group Policy Preferences
6: Managing User Settings with Group Policy
In this demonstration, you will see how to:
Configure a desktop shortcut with Group Policy preferences
Target the preference
Configure a new folder with Group Policy preferences
Test the preferences
At the end of this demonstration, you can revert the virtual machines.
Preparation Steps
You require the 10969A-LON-DC1 and 10969A-LON-CL1 virtual machines for this demonstration. Sign in as Adatum\Administrator with the password of Pa$$w0rd.
Demonstration Steps
Configure a desktop shortcut with Group Policy preferences
On LON-DC1, from Server Manager, open the Group Policy Management Console.
In the console tree, expand Forest: Adatum.com, Domains, and Adatum.com, and then click the Group Policy Objects container.
In the Group Policy Objects folder, and in the details pane, right-click the Default Domain Policy, and then click Edit.
Expand Computer Configuration, expand Preferences, expand Windows Settings, right-click Shortcuts, point to New, and then click Shortcut.
In the New Shortcut Properties dialog box, in the Action list, select Create.
In the Name box, type Notepad.
In the Location box, click the arrow, and then select All Users Desktop.
In the Target path box, type C:\Windows\System32\Notepad.exe.
Target the preference
On the Common tab, select the Item-level targeting check box, and then click Targeting.
In the Targeting Editor dialog box, click New Item, and then click Computer Name.
In the Computer Name box, type LON-CL1, and then click OK twice.
(More notes on the next slide)

26. 6: Managing User Settings with Group Policy
Configure a new folder with Group Policy preferences
Under Windows Settings, right-click Folders, point to New, and then click Folder.
In the New Folder Properties dialog box, in the Action list, select Create.
In the Path field, type C:\Reports.
Target the preference
On the Common tab, select the Item-level targeting check box, and then click Targeting.
In the Targeting Editor dialog box, click New Item, and then click Operating System.
In the Product list, select Windows Preview 8.1, and then click OK twice.
Close the Group Policy Management Editor.
Test the preferences
Sign in to LON-CL1 as Adatum\Administrator with the password Pa$$w0rd.
Type cmd.exe, and then press Enter.
At the command prompt, type the following command, and then press Enter:
gpupdate /force Y
From Start screen, click Desktop.
Verify the presence of the Notepad shortcut on the desktop.
On the taskbar, click File Explorer.
Verify the presence of the C:\Reports folder.

27. Lab: Managing User Desktops with Group Policy
6: Managing User Settings with Group Policy
Exercise 2: Configuring Folder Redirection
Exercise 1: Implementing Settings by Using Group Policy Preferences
A. Datum uses logon scripts to provide users with drive mapping to file shares. The maintenance of these scripts is an ongoing problem because they are large and complex. Your manager has asked you to implement drive mapping by using Group Policy preferences to remove logon scripts. You also need to place a desktop shortcut to the Notepad application for all users who belong to the IT Security group.
Exercise 2: Configuring Folder Redirection
To help minimize profile sizes, you need to configure Folder Redirection for the branch office users to redirect several profile folders to each user’s home drive.
Logon Information
Virtual machines: A-LON-DC1
10969A-LON-CL1
User name: Adatum\Administrator
Password: Pa$$w0rd
Estimated Time: 45 minutes

28. 10969A
Lab Scenario
6: Managing User Settings with Group Policy
A. Datum Corporation uses logon scripts to provide users with drive mapping to file shares. The maintenance of these scripts is an ongoing problem because they are large and complex. Your manager has asked you to implement drive mapping by using Group Policy preferences to remove logon scripts.
Your manager also has asked that you place a desktop shortcut to the Notepad application for all users who belong to the IT Security group, as well as add a new computer administrator’s security group as a local administrator on all servers.
To help minimize profile sizes, you also need to configure Folder Redirection to redirect several profile folders to each user’s home drive.

29. 10969A
Lab Review
6: Managing User Settings with Group Policy
You have created Group Policy preferences to configure new power options. How can you make sure that they apply only to laptop computers?
Question
Which options can you use to separate users’ redirected folders to different servers?
Answer
You can use Advanced Folder Redirection to choose different shared folders, on different servers, for different security groups.
Can you name two methods you could use to assign a GPO to selected objects within an OU?
You could use Windows Management Instrumentation (WMI) Filters to define a criterion for applying Group Policy, such as whether or not the machine is a laptop or what version of the operating system is installed. You also could use permissions on the GPO itself to allow or deny GPO settings to users or computers.
You have created Group Policy preferences to configure new power options. How can you make sure that they apply only to laptop computers?
Use item-level targeting to apply the preference to portable computers. Then, the preference will apply if the hardware profile of the computer identifies it as a portable computer.

30. Module Review and Takeaways
6: Managing User Settings with Group Policy
Common Issues and Troubleshooting Tips
Review Questions
Question
Why do some Group Policy settings take two logons before taking effect?
Answer
Users typically log on with cached credentials before Group Policy can apply to the current session. The settings will take effect at the next logon.
How can you support Group Policy preferences on Windows XP?
You must download and install the Group Policy client-side extensions for Group Policy preferences.
What is the benefit of having a central store?
A central store is a single folder in SYSVOL that holds all the .admx and .adml files that are required. After you have set up the central store, the Group Policy Management Editor recognizes it, and then loads all Administrative Templates from the central store instead of from the local machine.
What is the main difference between Group Policy settings and Group Policy preferences?
GPO settings enforce some settings on the client side, and they disable client interfaces for modification. However, Group Policy preferences provide settings, and it allow clients to modify them.

31. 6: Managing User Settings with Group Policy
Best Practice: Best Practices Related to Group Policy Management
Include comments on GPO settings.
Use a central store for Administrative Templates when having clients with Windows Vista, Windows 7, and Windows 8.
Use Group Policy preferences to configure settings that are not available in the Group Policy set of settings.
Common Issues and Troubleshooting Tips
Issue
Troubleshooting Tip
You have configured Folder Redirection for an OU, but none of the users’ folders are being redirected to the network location. When you look in the root folder, you observe that a subdirectory named for each user has been created, but they are empty.
The problem is most likely permissions-related. Group Policy creates users’ named subdirectories, but users do not have enough permissions to create the redirected folders inside them.
You have a mixture of Windows XP and Windows 8 computers. After configuring several settings in the Administrative Templates of a GPO, users with Windows XP operating systems report that some settings apply and others do not.
Not all new settings apply to older operating systems such as Windows XP. Check the setting itself to see to which operating systems the setting applies.
Group Policy preferences do not apply.
Check the preference settings for item-level targeting or incorrect configuration.