Managing User Desktops with Group Policy Module 5 Managing User Desktops with Group Policy

Managing Software with Group Policy Module Overview 5: Managing User Desktops with Group Policy Managing Software with Group Policy

Configuring Folder Redirection and Scripts

Lesson 1: Configuring Folder Redirection and Scripts 5: Managing User Desktops with Group Policy Demonstration: Configuring Scripts with GPOs

What Is Folder Redirection? 5: Managing User Desktops with Group Policy Folder redirection is a feature that allows folders to be located on a network server, but appear as if they are located on the local drive Folders that can be redirected in Windows Vista and later are: Desktop Start Menu Documents Pictures AppData\Roaming Contacts Downloads Favorites Saved Games Searches Links Music Videos

Settings for Configuring Folder Redirection 5: Managing User Desktops with Group Policy Folder redirection configuration options: Use Basic folder redirection when all users save their files to the same parent location Use Advanced folder redirection when the server hosting the folder location is based on group membership Use the Follow the Documents folder to force certain folders to become subfolders of Documents Target folder location options: Redirect to the users’ home directory (Documents folder only) Create a folder for each user under the root path Redirect to the following location Redirect to the local user profile location Accounting Users Accounts N-Z A-M Managers Anne Amy

Security Settings for Redirected Folders 5: Managing User Desktops with Group Policy NTFS permissions for root folder Creator/Owner Full control – subfolders and files only Administrator None Security group of users that save data on the share List Folder/Read Data, Create Folders/Append Data-This Folder Only System Full control Share permissions for root folder Creator/Owner Full control – subfolders and files only Security group of users that save data on the share Full control NTFS permissions for each user’s redirected folder Creator/Owner Full control – subfolders and files only %Username% Full control, owner of folder Administrators None System Full control

Demonstration: Configuring Folder Redirection 5: Managing User Desktops with Group Policy In this demonstration, you will see how to: Create a shared folder for folder redirection Create a GPO to redirect the Documents folder (More notes on the next slide)

Group Policy Settings for Applying Scripts 5: Managing User Desktops with Group Policy You can use scripts to perform many tasks, such as clearing page files or mapping drives, and clearing temp folders for users You can assign Group Policy script settings to assign: For computers: Startup scripts Shutdown scripts For users: Logon scripts Logoff scripts

Demonstration: Configuring Scripts with GPOs 5: Managing User Desktops with Group Policy In this demonstration, you will see how to: Create a login script to map a network drive Create and link a GPO to use the script and store the script in the Netlogon share (More notes on the next slide)

Configuring Group Policy Preferences

Lesson 2: Configuring Group Policy Preferences 5: Managing User Desktops with Group Policy Demonstration: Configuring Group Policy Preferences

Comparing Group Policy Preferences and Administrative Templates 5: Managing User Desktops with Group Policy Group Policy settings Group Policy Preferences Strictly enforce policy settings by writing the settings to areas of the registry that standard users cannot modify Are written to the normal locations in the registry that the application or operating system feature uses to store the setting Typically disable the user interface for settings that Group Policy is managing Do not cause the application or operating system feature to disable the user interface for the settings they configure Refresh policy settings at a regular interval Refresh preferences by using the same interval as Group Policy settings by default

Features of Group Policy Preferences 5: Managing User Desktops with Group Policy Common Tab Targeting Features Is used to configure additional options that control the behavior of a Group Policy preference item Determines to which users and computers a preference item applies

Item-Level Targeting Options 20411C Item-Level Targeting Options 5: Managing User Desktops with Group Policy Target 27 different categories Combine different categories together by using AND or OR Boolean logic. Instead of using a single category for targeting, you can use multiple categories Item-level targeting is refreshed during the Group Policy background refresh

Demonstration: Configuring Group Policy Preferences 5: Managing User Desktops with Group Policy In this demonstration, you will see how to: Configure a desktop shortcut with Group Policy preferences Target the preference Configure a new folder with Group Policy preferences (More notes on the next slide)

Managing Software with Group Policy

Lesson 3: Managing Software with Group Policy 5: Managing User Desktops with Group Policy Managing Software Upgrades by Using Group Policy Demonstration: Deploying software by using Group Policy

20411C How Group Policy Software Distribution Helps to Address the Software Lifecycle 5: Managing User Desktops with Group Policy Preparation 1 Deployment 2 Maintenance 3 Removal 4 1.0 2.0

How Windows Installer Enhances Software Distribution 5: Managing User Desktops with Group Policy Windows Installer: Windows Installer service: Fully automates the software installation and configuration process Modifies or repairs an existing application installation Windows Installer package contains: Information about installing or uninstalling an application An .msi file and any external source files Summary information about the application A reference to an installation point Benefits of using Windows Installer: Custom installations Resilient applications Clean removal

Assigning and Publishing Software 20411C Assigning and Publishing Software 5: Managing User Desktops with Group Policy Software Distribution Share Assign software during computer configuration Publish software using extension activation Publish software using Add or Remove Programs Assign software during user configuration

Managing Software Upgrades by Using Group Policy 5: Managing User Desktops with Group Policy Deploy next version of the application Mandatory upgrade Users can use only the upgraded version 1.0 2.0 Optional upgrade Users can decide when to upgrade Selective upgrade You can select specific users for an upgrade

Demonstration: Deploying software by using Group Policy 5: Managing User Desktops with Group Policy In this demonstration, you will see how to: Deploy software by using Group Policy (More notes on the next slide)

Additional Resources & Next Steps Instructor-Led Courses 20411C: Administering Windows Server 2012 Books Exam Ref 70-411: Administering Windows Server 2012 Exams & Certifications Exam 70-411: Administering Windows Server 2012