In this session we will explore the enhancements to the Group Policy system within Windows Server 2008 and Windows Vista. We will cover the new features in these two products specific to Group Policy and Group Policy processing. The session will then look at the new Group Policy Preferences, explain what they are and how to use them. We will also cover the template format, again looking at its structure and how to use it. Finally we will look at some scripting features of Group Policy and how to use script to automate some Group Policy functions.

1. Group Policy Preferences,
Templates, and Scripting
Level 300

2. What Will We Cover?
• New Group Policy Features
• Group Policy Preferences
• Administrative Templates
• Managing Group Policy Through Scripting

3. Agenda
• Reviewing New Group Policy Features
• Using Group Policy Preferences
• Exploring the New Template Format
• Scripting Group Policy

4. New Features of Group Policy
New Policy Management Settings
Starter Group Policy Objects (GPOs)
Comments for GPOs and Policy Settings
Network Location Awareness

5. Group Policy Enhancements
Group Policy Service
Complete isolation from Winlogon
Events and Logging
No longer relies on trace logging found in userenv.log
Multiple Local GPOs
Extends managing shared computing on a single computer
Finding Specific Administrative Template Policy
Settings
New options for searching and filtering Administrative Template policy settings

6. demonstration
Reviewing Group Policy Features
Explore New Group Policy Management

Settings
 Review Starter Group Policy Objects
 Configure Multiple Local Group Policy
Objects

7. Agenda
• Reviewing New Group Policy Features
• Using Group Policy Preferences
• Exploring the New Template Format
• Scripting Group Policy

8. Group Policy Preferences
Improves IT Productivity
Reduces Need for Logon Scripts
Limits Configuration Errors
Enhances End-User Satisfaction
Minimizes Image Maintenance
Reduces Overall Image Count

9. Group Policy Preference Settings
Create
Create dynamic drive
mapping to network share
Replace
Delete and recreate mapped
drive
Update
Modify settings of an existing
mapped drive
Delete
Delete mapped drive or
mapped drives

10. Preferences vs. Policy Settings
Group Policy Preferences Group Policy Settings
• Preferences are not enforced. • Settings are enforced.
Enforcement
• User interface is not disabled. • User interface is disabled.
• Can be refreshed or applied once. • Settings are refreshed.
• Easily create preference items for • Adding requires application support and
Flexibility
registry settings and files. creating administrative templates.
• Import individual registry settings or • Cannot create policy settings to manage
entire registry branches. files or folders.
• Not available in local Group Policy. • Available in local Group Policy.
Local Policy
• Supports non-Group Policy–aware • Requires Group Policy–aware applications.
Awareness
applications.
• Original settings are overwritten. • Original settings are not changed.
Storage
• Removing the preference item does not • Stored in registry policy branches.
• Removing setting restores original settings.
restore the original setting.
• Targeting is granular, with a user • Filtering is based on Windows Management
Targeting and
interface for each type of targeting item. Instrumentation (WMI) and requires writing
Filtering
• Supports targeting at the individual WMI queries.
• Supports filtering at a GPO level.
preference item level.
• Provides a familiar, easy-to-use • Provides an alternative user interface for
User Interface
interface for configuring most settings. most policy settings.

11. demonstration
Using Group Policy Preferences
Explore Group Policy Preferences

 Configure Group Policy Settings and
Preferences
 Log In and Review Group Policy
Preferences and Settings

12. Agenda
• Reviewing New Group Policy Features
• Using Group Policy Preferences
• Exploring the New Template Format
• Scripting Group Policy

13. ADMX Administrative Template Files
XML-Based Policy Definition Files
Central Store of ADMX Files
Multilanguage Support
Manage Both ADMX and ADM Files
Convert ADM Files to ADMX Format

14. demonstration
Exploring the ADMX Template
Format
Explore ADMX Administrative Template

Files
 Configure the Central Store
 Explore ADMX Filter Options

15. Agenda
• Reviewing New Group Policy Features
• Using Group Policy Preferences
• Exploring the New Template Format
• Scripting Group Policy

16. Scripting and the GPMC
http://go.microsoft.com/fwlink/?LinkId=109520

17. Scripts for Managing Group Policy
Make Cscript.exe default scripting host
Import and Export GPOs Group Policy Modeling
Copy and Paste GPOs Group Policy Results
Back Up and Restore GPOs Support for Migration Tables
Search for Existing GPOs Reporting Capabilities
Lib_CommonGPMCFunctions.js
should be in same location as scripts

18. GPMC Interfaces
• IGPMGPO Interface
– CopyTo
– GenerateReport
• IGPMRSOP Interface
– CreateQueryResults
– GenerateReport
http://msdn.microsoft.com/en-
us/library/aa814147(VS.85).aspx

19. demonstration
Scripting Group Policy
Review GPMC Sample Scripts

 Run GPMC Scripts

20. Session Summary
• There are many exciting new Group
Policy features in Windows Server 2008
• Take advantage of Group Policy
Preferences
• Almost all the functionality of GPMC can
be scripted

21. Where to Find More Information
Visit TechNet at: technet.microsoft.com
Also, visit TechNet Edge at:
edge.technet.com
and TechNet Spotlight at:
www.microsoft.com/emea/spotlight
Or, visit www.microsoft.com/technet/srv-302
for additional information about this session

22. Supporting Publications
For more titles, visit
www.microsoft.com/technet/srv-302

23. Training Resources
Course ID Title
Designing a Windows Server 2008 Active
6436A
Directory Infrastructure and Services
For more training information
www.microsoft.com/technet/srv-302

24. Become a Microsoft Certified Professional
• What Are MCP Certifications?
Validation in performing critical IT functions
• Why Certify?
WW recognition of skills gained via experience
More effective deployments with reduced costs
• What Certifications Are There for IT Pros?
MCTS, MCITP
www.microsoft.com/certification

25. TechNet Plus
TechNet Plus is an essential, premium, Web-enabled, and live support resource that provides IT Professionals with
fast and easy access to Microsoft experts, software, and technical information, enhancing IT productivity, control,
and planning.
Evaluate and Learn Plan and Deploy Support and Maintain
Evaluate full versions of all Microsoft
Use the TechNet Library to plan for Two complimentary Professional Support
commercial software for evaluation—
deployment using the Knowledge Base, incidents for use 24/7 (20-percent
without time limits; this includes all
resource kits, and technical training discount on additional incidents)
client, server, and Microsoft Office
system applications
Use exclusive tools, like System Center Access more than 100 managed
Capacity Planner, to accurately plan for newsgroups, and get next business day
Try out all the latest betas before public
and deploy Exchange Server and System response—guaranteed
release
Center Operations Manager
Use the TechNet Library to maintain your
Keep your skills current with quarterly
Stay informed with your free subscription IT environment with security updates,
training resources, including select
to TechNet Magazine service packs, and utilities
Microsoft E-Learning courses
Get all these resources and more with a TechNet Plus subscription.
For more information, visit: technet.microsoft.com/subscriptions