Domain GPO priority Domain-based GPOs still have precedence over LGPOs New policy setting: “Exclude processing of all local GPOs”Ĩ ADMX Central Store Windows Vista, Windows Server 2008 5:54 AM Multiple Local GPOs Windows Vista, Windows Server 2008 Local GPOs can be created for: The machine (same LGPO as today) NEW: Admins or non-Admins local groups NEW: Individual local users Application order is as above (machine LGPO processed first, etc), so individual user GPO “wins” Any single user receives either the Admin or the Non-Admin LGPO (not both) No change with LGPO vs. Microsoft makes no warranties, express or implied, in this summary.Ħ GPO Filtering Windows Vista, Windows Server 2008įilters a list of settings based on Text search of setting title, explain text and comments Platform and applications “supported on” Managed (true GP policy setting) Configured (enabled or disabled) Results of search is a filtered view in the editor Hierarchical list Flat list Only for Group Policies Administrative Template settings Not Group Policy Preferences Available through GPMC 2.0 Windows Server 2008 RSAT & Vista SP1 RSATħ Multiple Local GPOs Windows Vista, Windows Server 2008 This presentation is for informational purposes only. Windows Vista TAP Airlift 5:54 AM New/Updated Policy settings Windows Vista, Windows Server 2008 Up to 1,800+ policy settings in past +700 in Windows Vista (2500) Group Policy is a Windows ‘Manageability’ basic requirement Policy Settings Greatly Expanded in a Number of Areas Removable Storage Devices IPSec/ Windows Firewall Power Management Printer Management Troubleshooting and Diagnostics Windows Defender Network Access Protection Internet Explorer Tablet PC Windows Error Reporting User Account Control (UAC) Wired and Wireless Policy Desktop Shell Globalization Remote Assistance © 2006 Microsoft Corporation. Group Policy Templates ADM Templates now in ADMX files (ADMX, ADML) Windows Vista/Windows Server 2008 ADM ADMX Group Policy Tools New GPOE & GPMC Tools Use consistent versions! Group Policy Service GP now runs in a shared service Hardened Service, more reliable Multiple Local GPOs LGPO’s LGPO Admin User User Specified Group Policy Admin/Non-Admin Group Policy Local Computer Policy Group Policy Enhancements Group Policy Settings Over 800 new policy changes with Windows Vista Extended GP for new Windows Vista features Group Policy Central Store Centralized repository for ADMX Contains all ADMX templates Created in the SYSVOL on DC in each domain DC FRS/DFS-R SysVol ADMX ADML + Policies GUID ADM Policy Definations ADMX, ADML Files Network Location Awareness (NLA) NLA service provides the latest network information Applications can query or register with NLA for network change indications Group Policy Logging Administrative log Applications and Services log XML based event logs New Tools - GPOLogView Group Policy Preferences Set initial value Rich Administration UI Rich Item-level Targetingĥ New/Updated Policy settings Windows Vista, Windows Server 2008 Group Policies: Today Windows Vista, Windows Server 2008Ĥ Group Policy Features Windows Vista, Windows Server 2008 Group Policy Preferences (GPP) Scenarios Tomorrow GPEditor UI Powershell New features Extensions Kurt Roggen System Architect, DevoTeam/Guidance Blog:Ģ Agenda Today Tomorrow Group Policies (GP) 1 Group Policy Infrastructure in Windows: Today and Tomorrow
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |