1. Group Policy for Laptops and Printers

2. Order of Operations Computer Policies Things that apply to the hardware or all users Firewall Settings Disable CTRL-ALT-Del at login User Policies Things that follow the user Profile Settings Drive Mappings

3. Solutions Folder Synchronization Redirected Folders

4. The users folders are cached in a hidden spot so they are available when they leave the network. Any changes are synched back up upon their return to the Domain Problem, each user that logs in on a shared device leaves a cache of their entire home drive behind – Quickly filling the hard drive.

5. Folders such as home drives etc. are relocated to a server location thus safe and available on any domain connected computer! Yahoo! Problem – Laptops!!! Once they leave the network documents and desktop files cease to exist.

6. Loopbacks are the exception to the rule processing order Computer Policy User Policy Loopback policy against subgroup. In this case we will undo something we did!

7. Define the subgroup We placed all laptops in a separate OU Target the Loopback policy at the subgroup Default Computer Policy runs – Fixes Stuff Default user policy sets to Profile locations Loopback policy unsets the Profiles, but only if it is a laptop.

8. Create a Policy Called Laptop Loopback Define the following: Computer Config/Policies/Admin Templates/System/Group Policy: User Group Policy Loopback Mode: Enabled Next undo the folder redirections you set in the User Policy Associate the policy with the laptop group!

10. We define printers by computer location and also who you are. Simplifies driver updates Controls access to copiers and color printers etc. Simplifies the imaging process

11. You can do this in 4 easy steps Create the printers and drivers Define printer install groups that match computer locations Define printer user access security. Create the Push Printer policy

12. 32 bit drivers are not on Server 2008R2, you will need to push them up if you need them. If you log into the workstation machine with an account that has admin privileges for both workstation and print server, you can get into the 'view remote printers' section (used to be called 'printers and faxes'). From here you can pull up properties and install the 'additional drivers’. If the workstation doesn't currently have drivers for this printer, or you can't get to the additional drivers section, first install the printer by IP (temporarily) so you have all the proper driver files.

13. Divide your work areas up by printer locations. Main Building Copiers (Available on all Machines) Departmental Printers (Create a Math Wing Printer Group) Don’t worry, a computer can belong to multiple groups (Main Office Copiers plus departmental) Include all printers a staff member may need even in Labs, we will sort the kids off the color printers later!

14. Set the security for the printers to users or groups of users that should have access to them. These can be existing groups If a user does not have access to the printer it will not install. AWESOME!

15. This is where it gets strange Even though it is hardware and set by computer you push to printer to a user. Makes sense if you consider that printers are user profile specific

16. User Config/Prefs/Control Panel/Printers

17. Action – Create Set Printer Path Decide if it should be a default

18. Must Click “Run in Logged-on users security context Also must select Item-Level Targeting

19. Remember that set of computer groups we created, here is where you use them.

20. Any Questions - Aaron will be available for a small fee after todays session!!!