Group Policy Preferences are one of the top 10 new features in Windows Server
2008.
Whereas regular Group Policies 'Tattoo'
settings, Preferences merely pencil an outline, which the users can then erase and
replace with their own choices.
Benefits of Preferences rather than Policies
With Windows Server 2008 preferences you, as the administrator, can establish the
very best first logon settings for the users. Thereafter each individual can over-ride your
suggestions without fear of having their new settings reversed by 'big brother'.
Other benefits include the ability to set preferences for applications and
registry settings outside the scope of traditional Group Policy templates.
If you need fine-control over who starts with which setting lookout for:
'Preference item-level targeting'.
Should Group Policy Preferences appear too slack, you can regain control
through the ability to 'refresh' the users settings. However, by default,
and in keeping with the whole spirit of preferences, the principle is to advise,
but then let the user chose their own environment.
Other Benefits of Preferences
As you experiment with Preferences, think laterally; embrace the new
technology and you will be pleasantly surprised with extra benefits. For
example, there will be less need for Logon Scripts to map drives and printers.
This will save you debugging VBScript commands, and there will be fewer problems with permissions or
with firewalls blocking logon scripts.
Group Policy Preferences will help you recover from, and snuff-out, configuration errors. Let
us be realistic, with every client roll-out less sooner or later than optimal settings appear, thanks to
preferences you can correct these slip-ups before the users start moaning.
Another side-effect is that you can rollout Vista (or XP) with fewer images,
this is because you can fine-tune one main image with settings controlled by Group
Policy Preferences.
Possibly, I have saved the biggest benefit of Preferences over Group Policy
until last. There are about a dozen preference extensions that are simply
not available with the
regular Group Policy templates.
Example of Preferences - Map Network Drive
The above example shows a preference for mapping the R: drive to a folder
called 'Public' on
a network server.
Guy Recommends: SolarWinds LANSurveyor
LANSurveyor will produce a neat diagram of your network topology. But that's
just the start;
LANSurveyor can
create an inventory of the hardware and software
of your machines and network devices. Other neat features include dynamic
update for when you add new devices to your network. I also love the ability to export
the diagrams
to Microsoft Visio.
Finally, Guy bets that if you take a free trial of LANSurveyor then you will
find a device on your network that you had forgotten about, or someone else
installed without you realizing!
With the Files preference extension you can create, replace, update, or
even delete files on the target computer. I also love the way preferences supports environment
variables such as AppData, thus you don't need to hard-code the paths. One practical use for this combination of folders and environmental variables
is for clearing up temp files.
Meanwhile the sister configuration: Network Shares supports the Access-based
Enumeration (ABE), which prevents users from seeing subfolders where they don't
have any permissions.
Shortcuts
Shortcuts are one of the quickest and easiest ways to help users, for example,
you can add URL shortcuts to websites. In addition to the Desktop, you can
create shortcuts in the Favorites folder, Start menu, even on the Quick Launch
toolbar.
̃
Other Areas to Configure Preferences
You can also create preference for the Control Panel, XP or Vista Printers,
Power Options, Scheduled Tasks and VPN connections for remote access.
What action do you want Preferences to achieve?
You may have already inferred, the four actions for each Group Policy Preference are:
Create, Delete, Replace and Update.
Each Preference feature also has a 'Common' Tab where you can set these extra
options:
Stop processing items in this extension if an error occurs
Run in logged-on user's security context (user policy option)
Remove this item when it is no longer applied
Apply once and do not reapply
Item-level targeting control
Targeting determines which users and computers a setting applies.
Check the option, and then select the Targeting button
Get a Report for Your Preferences
Fortunately, you can see which Group Policy Preferences you have set by creating a reports within the Group Policy Management Console (GPMC).
Create a report by starting in the Group Policy Results folder, found at the bottom of
the Console tree.
Group Policy preferences client-side extension (CSE)
A twist in the tail. Before you get any action on the XP or even Vista
clients, you need to download Group Policy preferences client-side extension
(CSE). Presumably you will use the Group Policy's own technology to Assign this
software to your domain computers. The way to get started is to visit
Microsoft's site to get a copy of the CSE package.
Summary of Windows Server 2008 - Group Policy Preferences
My speciality is getting people started, in this instance, once you home in
on the keyword 'Preferences' my job is done. The main difference between
the word 'Preferences', and the phrase 'Policy Settings', is enforcement.
Train Signal has
now released their
Windows Server 2008 Training Course. As an MCT
trainer, I am a huge advocate of Train Signals products. What particularly
impresses is me is the demonstrations. If
you are looking for a complete DETAILED coverage of Windows Server 2008, then I highly recommend that you give this course a try. I have reviewed their
6 hours plus of videos myself, and I guarantee that you will
not be disappointed!