1. ACTIVE DIRECTORY GROUP POLICY MAEDS Spring PD Day 2012 Nicholas A. Hay Jefferson Schools nhay@jefferson.k12.mi.us nhay@jefferson.k12.mi.us

2. LOGIN / LOGOFF / STARTUP / SHUTDOWN SCRIPTS

3. WIRELESS POLICY

4. FOLDER REDIRECTION  User > Policies > Windows Settings > Folder Redirection

5. GP PREF’S - ITEM LEVEL TARGETING  Allows fine-tuning of where item is applied.  Reduce GPO's where a few settings may be different.  Can eliminate (99.9% of the time) scripts completely and easy to implement changes  Be sure to check the run in logged-on user’s security context when using User Policies or the PC will use the System account to process object.

6. GP PREF’S – DRIVE MAPPINGS

7. GP PREFERENCES – ACTION TYPES  Create  Replace  Deletes and recreate the item.  Update  This is usually the option you will use when defining items in Preferences. This just refreshes the object rather than deleting and recreating it.  Delete

8. GP PREF’S – DRIVE MAPPINGS

9. GP PREF’S - SHORTCUTS

11. GP PREF’S – PRINTERS  Printers can be added to list in one of three ways  Shared Printer(only available in User Configuration)  TCP/IP Printer(available in Computer and User Configuration)  Local Printer (available in Computer and User Configuration)

12. GP PREF’S – PRINTERS

13. GP PREF’S – REGISTRY

14. GP PREF’S – POWER SETTINGS

15. HOW TO: WIN 7AUTO LOGIN  Create a GPO and apply it to an OU. Any computers you add to this OU will get this policy after a reboot.  There are 4 registry keys that need to be set at a computer level in the Registry GP Preferences  http://www.computerperformance.co.uk/windows7/windows7_auto_logon.htm http://www.computerperformance.co.uk/windows7/windows7_auto_logon.htm

16. ADD ADDITIONAL GPO TEMPLATES  Software vendors have GPO Templates that can be added into GP to be managed.  You can create GPO Templates as well  Two ways to add:  To add a template go under Computer or User Config and right click on Administrative Templates and select Add/ Remove Templates…  Copy the template files on the computer C:\Windows\PolicyDefinitions

17. ADDING OFFICE 2010 TEMPLATES  Download at the following link below:  http://www.microsoft.com/download/en/details.aspx?id=18968 http://www.microsoft.com/download/en/details.aspx?id=18968  There are two types of template formats  ADM  ADMX (XML version of ADM)  Pre Windows Vista computers cannot load this in the GP Editor programs, but the policies will still be applied to them from the Domain server.  These files are language neutral. The descriptions of each policy in these files are stored in the language folder (en-us is the English language) and are needed for the policies when uploading

18. GP CENTRAL REPOSITORY  GP Templates may not be available on all computers or servers. This is to due with the computers, by default, using a local repository of the GP Templates.  Local copies of the GP templates will be used unless a central repository is on the server.  If you are creating a GPO on a computer that doesn’t have a particular template you need to add it manually to the local computer to view the properties of this.  How to creating a Central Repository  Windows Vista and Server 2008 and up support this.  http://www.petri.co.il/creating-group-policy-central-store.htm http://www.petri.co.il/creating-group-policy-central-store.htm  Location  Local Repository:C:\Windows\PolicyDefinitions  Central Repository:C:\Windows\SYSVOL\domain\Policies (on domain server)

19. OFFICE OUTLOOK AUTO CONFIG

20. OFFICE PRIVACY TRUST CENTER

21. RESOURCES  http://www.gpanswers.com/ http://www.gpanswers.com/  Jeremy Mosowitz has some online classes, for a fee, that are very helpful to become familiar with Group Policy.  http://technet.microsoft.com/en-us/library/hh147307(WS.10).aspx http://technet.microsoft.com/en-us/library/hh147307(WS.10).aspx  Group Policy for Beginners page