20411B-ENU-TrainerHandbook
.pdf
|
|
Administering Windows Server® 2012 |
|
MCT |
||
|
|
6-13 |
|
|||
When you configure a new preference, you can perform the following four basic actions: |
|
|
|
|||
• Create. Create a new preference setting for the user or computer. |
|
USE |
||||
• Delete. Remove an existing preference setting for the user or computer. |
|
|||||
• |
Replace. Delete and recreate a preference setting for the user or computer. The result is that Group |
|||||
|
|
|||||
|
Policy preferences replace all existing settings and files associated with the preference item. |
|
|
|
||
• Update. Modify an existing preference setting for the user or computer. |
|
.ONLY |
||||
Comparing Group Policy Preferences and GPO Settings |
|
|||||
|
|
|
||||
Preferences are similar to policies in that they |
|
|
|
|
||
|
|
|
|
|||
apply configurations to the user or computer. |
|
|
|
|
||
However, there are several differences in the way |
|
|
|
|
||
that you can configure and apply them. One of |
|
|
|
|
||
these differences is that preferences are not |
|
|
STUDENT |
|||
enforced. However, you can configure preferences |
|
|
||||
|
|
|
|
|||
to be reapplied automatically. |
|
|
|
|
||
The following is a list of other differences between |
|
|
|
|
||
Group Policy settings and preferences: |
|
|
|
|
||
• Preference settings are not enforced. |
|
|
|
|
||
• Group Policy settings disable the user |
|
|
|
|
||
|
|
|
|
|||
|
interface for settings that the policy manages. Preferences do not do this. |
|
|
|
||
• Group Policy settings are applied at regular intervals. You can apply preferences once only or at |
|
|
|
|||
|
intervals. |
|
|
|
||
• The end user can change any preference setting that is applied through Group Policy, but policy |
|
|
|
|||
|
settings prevent users from changing them. |
|
USE |
|||
• |
In some cases, you can configure the same settings through a policy setting as well as a preference |
|||||
|
|
|||||
|
item. If conflicting preference and Group Policy settings are configured and applied to the same |
|
|
|
||
|
object, the value of the policy setting always applies. |
|
|
|
||
Features of Group Policy Preferences |
|
PROHIBITED |
||||
After you create a Group Policy preference, |
|
|
||||
|
|
|
|
|||
you must configure its properties. Different |
|
|
|
|
||
preferences will require different input |
|
|
|
|
||
information. For example, shortcut preferences |
|
|
|
|
||
require target paths, whereas environment |
|
|
|
|
||
variables require variable types and values. |
|
|
|
|
||
Preferences also provide a number of features |
|
|
|
|
||
in the common properties to assist in the |
|
|
|
|
||
deployment. |
|
|
|
|
||
|
|
|
|
|
|
|
Administering Windows Server® 2012 |
MCT |
|
|
6-15 |
|
|
Target the preference |
|
|
|
• |
Target the preference for the computer, LON-CL1. |
|
|
Configure a new folder with Group Policy preferences |
USE |
||
1. |
Navigate to User Configuration\Preferences\Windows Settings\Folders. |
||
2. |
Create a new folder for the C:\Reports folder. |
||
Target the preference |
•Target this preference for computers that are running the Windows 8 operating system.
Test the preferences
1. |
Switch to LON-CL1, and refresh the group policies by using the following command at the command |
|
prompt: |
|
gpupdate /force |
|
ONLY |
2. |
. |
Sign in and verify the presence of both the C:\Reports folder and the Notepad shortcut on the |
|
|
Desktop. |
|
PROHIBITED USE STUDENT |
The Windows Installer service has the following characteristics: MCT
Administering Windows Server® 2012 6-17
• This service runs with elevated privileges, so that software can be installed by the Windows Installer
service, no matter which user is logged onto the system. Users only require read access to the software distribution point.
• Applications are resilient. If an application becomes corrupted, the installer will detect and reinstall or
repair the application. |
USE |
|||
• Windows Installer cannot install .exe files. To distribute a software package that installs with an .exe |
||||
.ONLY |
||||
file, the .exe file must be converted to an .msi file by using a third-party utility. |
||||
Question: Do users need administrative rights to install applications manually that have MSI |
||||
files? |
||||
Question: What are some disadvantages of deploying software through Group Policy? |
||||
Assigning and Publishing Software |
||||
There are two deployment types available for |
|
|
|
|
|
STUDENT |
|||
delivering software to clients. Administrators can |
|
|||
either install software for users or computers in |
|
|||
advance by assigning the software, or give users |
|
|||
the option to install the software when they |
|
|||
require it by publishing the software in AD DS. |
|
|||
Both user and computer configuration sections |
|
|||
of a GPO have a Software Settings section. You |
|
|||
can add software to a GPO by adding a new |
|
|||
package to the Software Installation node, and |
|
|||
then specifying whether to assign or publish it. |
|
|||
|
|
|||
|
|
|
|
|
You also can choose advanced deployment of a |
|
USE |
||
package. Use this option to apply a customization file to a package for custom deployment. For |
||||
|
|
example, if you use the Office Customization tool to create a setup customization file to deploy Microsoft Office 2010.
•When you assign software to a user, the user’s Start menu advertises the software when the user logsPROHIBITED on. Installation does not begin until the user double-clicks the application's icon or a file that is
associated with the application.
•Users do not share deployed applications. When you assign software to a user, an application that you install for one user through Group Policy will not be available to other users.
•When you assign an application to a computer, the application is installed the next time that the computer starts. The application will be available to all users of the computer.
Administering Windows Server® 2012 6-19
Lab: Managing User Desktops with Group Policy |
MCT |
|||
|
Scenario |
|
||
|
|
|
|
|
|
A. Datum Corporation is a global engineering and manufacturing company with its head office in London, |
|||
|
U.K. An IT office and a data center are located in London to support the London head office and other |
USE |
||
|
locations. A. Datum has recently deployed a Windows Server 2012 server and client infrastructure. |
|||
|
A. Datum has just opened up a new branch office. Users in this office require an automated method for |
|||
|
|
|
||
|
mapping drives to shared server resources and you decide to use Group Policy preferences. Furthermore, |
|||
|
you have been asked to create a shortcut to the Notepad application for all users that belong to the IT |
.ONLY |
||
|
security group. To help minimize profile sizes, you have been asked to configure folder redirection to |
|||
|
redirect several profile folders to each user’s home drive. |
|||
|
Objectives |
|
||
|
After completing this lab, you will be able to: |
|
||
|
• Implement settings by using Group Policy preferences. |
|||
|
|
|
||
|
• Configure folder redirection. |
|
|
|
|
Lab Setup |
|
|
|
|
Estimated Time: 45 minutes |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Virtual Machines |
20411B-LON-DC1 |
|
|
|
|
20411B-LON-CL1 |
|
|
|
|
|
|
|
|
User Name |
Adatum\Administrator |
|
|
|
|
|
|
|
|
Password |
Pa$$w0rd |
STUDENT |
|
|
|
|
For this lab, you will use the available virtual machine environment. Before you begin the lab, you must
1.On the host computer, click Start, point to Administrative Tools, and then click Hyper-V ManagerUSE.
2.In Hyper-V® Manager, click 20411B-LON-DC1, and in the Actions pane, click Start.
3.In the Actions pane, click Connect. Wait until the virtual machine starts.
4.Sign in using the following credentials: PROHIBITED o User name: Administrator
o Password: Pa$$w0rd o Domain: Adatum
5.Repeat steps 2 through 4 for 20411B-LON-CL1.