Group Policy Preferences, Templates, And Scripting


Published on

In this session we will explore the enhancements to the Group Policy system within Windows Server 2008 and Windows Vista. We will cover the new features in these two products specific to Group Policy and Group Policy processing. The session will then look at the new Group Policy Preferences, explain what they are and how to use them. We will also cover the template format, again looking at its structure and how to use it. Finally we will look at some scripting features of Group Policy and how to use script to automate some Group Policy functions.

Published in: Technology
  • Be the first to comment

No Downloads
Total views
On SlideShare
From Embeds
Number of Embeds
Embeds 0
No embeds

No notes for slide

Group Policy Preferences, Templates, And Scripting

  1. 1. Group Policy Preferences, Templates, and Scripting Level 300
  2. 2. What Will We Cover? • New Group Policy Features • Group Policy Preferences • Administrative Templates • Managing Group Policy Through Scripting
  3. 3. Agenda • Reviewing New Group Policy Features • Using Group Policy Preferences • Exploring the New Template Format • Scripting Group Policy
  4. 4. New Features of Group Policy New Policy Management Settings Starter Group Policy Objects (GPOs) Comments for GPOs and Policy Settings Network Location Awareness
  5. 5. Group Policy Enhancements Group Policy Service Complete isolation from Winlogon Events and Logging No longer relies on trace logging found in userenv.log Multiple Local GPOs Extends managing shared computing on a single computer Finding Specific Administrative Template Policy Settings New options for searching and filtering Administrative Template policy settings
  6. 6. demonstration Reviewing Group Policy Features Explore New Group Policy Management  Settings  Review Starter Group Policy Objects  Configure Multiple Local Group Policy Objects
  7. 7. Agenda • Reviewing New Group Policy Features • Using Group Policy Preferences • Exploring the New Template Format • Scripting Group Policy
  8. 8. Group Policy Preferences Improves IT Productivity Reduces Need for Logon Scripts Limits Configuration Errors Enhances End-User Satisfaction Minimizes Image Maintenance Reduces Overall Image Count
  9. 9. Group Policy Preference Settings Create Create dynamic drive mapping to network share Replace Delete and recreate mapped drive Update Modify settings of an existing mapped drive Delete Delete mapped drive or mapped drives
  10. 10. Preferences vs. Policy Settings Group Policy Preferences Group Policy Settings • Preferences are not enforced. • Settings are enforced. Enforcement • User interface is not disabled. • User interface is disabled. • Can be refreshed or applied once. • Settings are refreshed. • Easily create preference items for • Adding requires application support and Flexibility registry settings and files. creating administrative templates. • Import individual registry settings or • Cannot create policy settings to manage entire registry branches. files or folders. • Not available in local Group Policy. • Available in local Group Policy. Local Policy • Supports non-Group Policy–aware • Requires Group Policy–aware applications. Awareness applications. • Original settings are overwritten. • Original settings are not changed. Storage • Removing the preference item does not • Stored in registry policy branches. • Removing setting restores original settings. restore the original setting. • Targeting is granular, with a user • Filtering is based on Windows Management Targeting and interface for each type of targeting item. Instrumentation (WMI) and requires writing Filtering • Supports targeting at the individual WMI queries. • Supports filtering at a GPO level. preference item level. • Provides a familiar, easy-to-use • Provides an alternative user interface for User Interface interface for configuring most settings. most policy settings.
  11. 11. demonstration Using Group Policy Preferences Explore Group Policy Preferences   Configure Group Policy Settings and Preferences  Log In and Review Group Policy Preferences and Settings
  12. 12. Agenda • Reviewing New Group Policy Features • Using Group Policy Preferences • Exploring the New Template Format • Scripting Group Policy
  13. 13. ADMX Administrative Template Files XML-Based Policy Definition Files Central Store of ADMX Files Multilanguage Support Manage Both ADMX and ADM Files Convert ADM Files to ADMX Format
  14. 14. demonstration Exploring the ADMX Template Format Explore ADMX Administrative Template  Files  Configure the Central Store  Explore ADMX Filter Options
  15. 15. Agenda • Reviewing New Group Policy Features • Using Group Policy Preferences • Exploring the New Template Format • Scripting Group Policy
  16. 16. Scripting and the GPMC
  17. 17. Scripts for Managing Group Policy Make Cscript.exe default scripting host Import and Export GPOs Group Policy Modeling Copy and Paste GPOs Group Policy Results Back Up and Restore GPOs Support for Migration Tables Search for Existing GPOs Reporting Capabilities Lib_CommonGPMCFunctions.js should be in same location as scripts
  18. 18. GPMC Interfaces • IGPMGPO Interface – CopyTo – GenerateReport • IGPMRSOP Interface – CreateQueryResults – GenerateReport us/library/aa814147(VS.85).aspx
  19. 19. demonstration Scripting Group Policy Review GPMC Sample Scripts   Run GPMC Scripts
  20. 20. Session Summary • There are many exciting new Group Policy features in Windows Server 2008 • Take advantage of Group Policy Preferences • Almost all the functionality of GPMC can be scripted
  21. 21. Where to Find More Information Visit TechNet at: Also, visit TechNet Edge at: and TechNet Spotlight at: Or, visit for additional information about this session
  22. 22. Supporting Publications For more titles, visit
  23. 23. Training Resources Course ID Title Designing a Windows Server 2008 Active 6436A Directory Infrastructure and Services For more training information
  24. 24. Become a Microsoft Certified Professional • What Are MCP Certifications? Validation in performing critical IT functions • Why Certify? WW recognition of skills gained via experience More effective deployments with reduced costs • What Certifications Are There for IT Pros? MCTS, MCITP
  25. 25. TechNet Plus TechNet Plus is an essential, premium, Web-enabled, and live support resource that provides IT Professionals with fast and easy access to Microsoft experts, software, and technical information, enhancing IT productivity, control, and planning. Evaluate and Learn Plan and Deploy Support and Maintain Evaluate full versions of all Microsoft Use the TechNet Library to plan for Two complimentary Professional Support commercial software for evaluation— deployment using the Knowledge Base, incidents for use 24/7 (20-percent without time limits; this includes all resource kits, and technical training discount on additional incidents) client, server, and Microsoft Office system applications Use exclusive tools, like System Center Access more than 100 managed Capacity Planner, to accurately plan for newsgroups, and get next business day Try out all the latest betas before public and deploy Exchange Server and System response—guaranteed release Center Operations Manager Use the TechNet Library to maintain your Keep your skills current with quarterly Stay informed with your free subscription IT environment with security updates, training resources, including select to TechNet Magazine service packs, and utilities Microsoft E-Learning courses Get all these resources and more with a TechNet Plus subscription. For more information, visit: