Transcript 06-Configuring User Environments Using Group Policies

Module 6: Configuring
User Environments
Using Group Policies
Module Overview
• Configuring Group Policy Settings
• Configuring Scripts and Folder Redirection Using
Group Policies
• Configuring Administrative Templates
• Deploying Software Using Group Policy
Lesson 1: Configuring Group Policy Settings
• Options for Configuring Group Policy Settings
• Demonstration: Configuring Group Policy Settings Using
the Group Policy Editor
Options for Configuring Group Policy Settings
Enable / Disable
Multi-valued settings
Demonstration: Configuring Group Policy Settings
Using the Group Policy Editor
In this demonstration, you will see how to configure Group
Policy settings
Lesson 2: Configuring Scripts and Folder
Redirection Using Group Policies
• What Are Group Policy Scripts?
• Demonstration: Configuring Scripts with Group Policies
• What Is Folder Redirection?
• Folder Redirection Configuration Options
• Options for Securing Redirected Folders
• Demonstration: Configuring Folder Redirection
What Are Group Policy Scripts?
You can use scripts to perform many tasks, such as clearing page
files or mapping drives, and clearing temp folders for users, etc…
Group Policy script settings can be used to assign:
• For computers

Startup scripts

Shutdown scripts
• For users

Logon scripts

Logoff scripts
Demonstration: Configuring Scripts with
Group Policies
In this demonstration, you will see how to assign a logon
script to a user
What Is Folder Redirection?
Folder redirection allows folders
to be located on a network
server, but appear as if they are
located on the local drive
The folders that can be redirected are:
• My Documents (Documents in
Windows Vista)
• Application Data (AppData in Windows Vista)
• Desktop
• Start Menu
Extra folders that can be redirected
in Windows Vista are:
• Contacts
• Searches
• Downloads
• Links
• Favorites
Folder Redirection Configuration Options
• Use basic Folder Redirection when
all users save their files to the
same location
• With advanced Folder Redirection,
the server hosting the folder location
is based on group membership
• Target folder location options:
• Redirect to the users
home directory
• Create a folder for each user
under the root path
• Redirect to the
following location
• Redirect to the local
userprofile location
Accounting
Users
Accounts
A-M
Accounts
N-Z
Accounting
Managers
Misty
Anne
Options for Securing Redirected Folders
NTFS permissions for root folder
Creator/Owner
Full control-subfolders and files only
Administrator
• None
Security group of
users that
put data on share
• List Folder/Read Data, Create Folders/Append
Local System
• Full control
Data - This Folder Only
Share permissions for root folder
Creator/Owner
Security group of
users that
put data on share
Full control-subfolders and files only
• Full control
NTFS permissions for each users redirected folder
Creator/Owner
Full control-subfolders and files only
%Username%
• Full control, owner of folder
Administrators
• None
Local system
• Full Control
Demonstration: Configuring Folder Redirection
In this demonstration, you will see how to configure folder
redirection for the Documents folder
Lesson 3: Configuring Administrative Templates
• What Are Administrative Templates?
• Demonstration: Configuring Administrative Templates
• Modifying Administrative Templates
• Demonstration: Adding Administrative Templates for
Office Applications
• Discussion: Options for Using Administrative Templates
What Are Administrative Templates?
Administrative Templates allow you to control the environment of
the operating system and user experience
Administrative Templates
sections for
computers are:
Administrative Templates
sections for users:
• Windows components
• Windows components
• System
• Start menu and taskbar
• Network
• Desktop
• Printers
• Control panel
• Shared folders
• Network
• System
Demonstration: Configuring
Administrative Templates
In this demonstration, you will see how to configure
Administrative Templates
Modifying Administrative Templates
ADMX files:
• Are extensible
• Can be edited with any text editor
New ADMX files can be added to the Policy Definitions folder or
the Central Store
Demonstration: Adding Administrative Templates
for Office Applications
In this demonstration, you will see how to add in the ADM
files for Office 2007
Discussion: Options for Using Administrative
Templates
• What Administrative Templates are deployed in your
organization now?
• What desktop settings would you like to implement for
users in your organization?
• Which Administrative Template settings will you need to
apply?
Lesson 4: Deploying Software Using Group Policy
• Options for Deploying and Managing Software Using
Group Policies
• How Software Distribution Works
• Options for Installing Software
• Demonstration: Configuring Software Distribution
• Options for Modifying the Software Distribution
• Demonstration: Modifying Software Distribution
• Maintaining Software Using Group Policies
• Discussion: Evaluating the Use of Group Policies to
Deploy Software
Options for Deploying and Managing Software
Using Group Policies
1
2
1.0
Preparation
Deployment
4
3
2.0
Removal
Maintenance
How Software Distribution Works
Windows Installer
Windows Installer service
Fully automates the
software installation and
configuration process
Modifies or repairs an
existing application
installation
Benefits of
Using
Windows
Installer
Windows Installer package contains
Information about installing or
uninstalling an application
An .msi file and any external source
files
Summary information about the
application
A reference to an installation point
Custom
installations
Resilient
applications
Clean removal
Options for Installing Software
Assign software
during Computer
Configuration
Software
Distribution
Point
Assign software
during User
Configuration
?
Publish software
using document
activation
Publish software
using Add or
Remove
Programs
Demonstration: Configuring Software Distribution
In this demonstration, you will see how to deploy a software
package through both assigning and publishing
Options for Modifying the Software Distribution
Options:

Software can be categorized in the Add Programs applet

File extensions can be associated with particular applications

Software deployment can be customized using MST files
Demonstration: Modifying Software Distribution
In this demonstration, you will see how to:
• Create software categories
• Configure software distribution properties
Maintaining Software Using Group Policies
Users can use
only the
upgraded version
2.0
Deploy next
version of the
application
Mandatory upgrade
2.0
1.0
Users can decide
when to upgrade
2.0
Optional upgrade
2.0
1.0
Selective upgrade
You can select
specific users for
an upgrade
Discussion: Evaluating the Use of Group Policies
to Deploy Software
• What are the advantages of using group policies to deploy
software?
• What are the limitations?
• What additional features are provided by other software
distribution packages?
Lab: Creating and Configuring GPOs
• Exercise 1: Configuring Scripts and Folder Redirection
• Exercise 2: Configuring Administrative Templates
• Exercise 3: Verifying GPO Application
Logon information
Virtual machine
NYC-DC1, NYC-CL1
User name
Administrator
Password
Pa$$w0rd
Estimated time: 60 minutes
Lab Review
• You have configured folder redirection for an OU, but none
of the user’s folders are being redirected to the network
location. When you look in the root folder, you observe
that a subdirectory named for each user has been created,
but they are empty. What is the problem?
• You have an .MSI file for a small application that you want
globally available to all users and computers in an OU.
What steps would you take to accomplish this?
Module Review and Takeaways
• Considerations
• Review questions
Beta Feedback Tool
Beta feedback tool helps:
•



•
Collect student roster information, module feedback, and
course evaluations.
Identify and sort the changes that students request, thereby
facilitating a quick team triage.
Save data to a database in SQL Server that you can later
query.
Walkthrough of the tool
Beta Feedback
Overall flow of module:
•


Which topics did you think flowed smoothly from topic to
topic?
Was something taught out of order?
Pacing:
•



Were you able to keep up? Are there any places where the
pace felt too slow?
Were you able to process what the instructor said before
moving on to next topic?
Did you have ample time to reflect on what you learned? Did
you have time to formulate and ask questions?
Learner activities:
•



Which demos helped you learn the most? Why do you think
that is?
Did the lab help you synthesize the content in the module?
Did it help you to understand how you can use this
knowledge in your work environment?
Were there any discussion questions or reflection questions
that really made you think? Were there questions you
thought weren’t helpful?