Section 1: Introducing Group Policy What Is Group Policy? Group Policy Scenarios New Group Policy Features Introduced with Windows Server 2008 and Windows Vista New Group Policy Features Introduced with Windows Server 2008 R2 and Windows 7 New Group Policy Features in Windows Server 2012 and Windows 8 Client Managing Windows Environments with Group Policy
22
Embed
Section 1: Introducing Group Policy What Is Group Policy? Group Policy Scenarios New Group Policy Features Introduced with Windows Server 2008 and Windows.
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Section 1: Introducing Group Policy
What Is Group Policy?
Group Policy Scenarios
New Group Policy Features Introduced with Windows
Server 2008 and Windows Vista
New Group Policy Features Introduced with Windows
Server 2008 R2 and Windows 7
New Group Policy Features in Windows Server 2012 and
After completing this section, you will be able to:Define Group PolicyList the ways you can use Group PolicyDescribe the tools, features, and policies you can use
to manage group policiesDescribe the new Group Policy features available in the
Software Restriction Policies Compatible with Windows XP and later Are more difficult to configure for large numbers of files
AppLocker Policies Compatible with Windows 7 and later Can be created by scanning a folder structure Can use wild-card values to restrict or allow access
New power management options Block device driver installation Windows Firewall with Advanced Security options New Windows Internet Explorer options Location-Based printer installation Printer driver installation for non-administrators
Group Policy is a mechanism for applying computer and user settings to one or many computers throughout an Active Directory environment.
Use Group Policy to: Prevent changes to the desktop environment Enforce an Audit policy for servers Maintain user documents on a central server Assign a software package to many computers Prevent users from running unauthorized code Map a drive letter to a server resource
New Group Policy features in Windows Server 2008 and Windows Vista (cont.)
1-19
Feature Description
New GPO Settings
• New power management options: Set central standard for power management settings
• Block device driver installation: Settings are now more granular; can block or allow device driver installation down to a specific PnP hardware identifier; can block installation of removable media devices; can customize a balloon tip message when installation is prevented
• Windows Firewall with Advanced Security options: With a new interface you can easily create outbound filters; IPSec functionality has been integrated directly into the Windows Firewall interface
• New Internet Explorer options: Most new Windows Internet Explorer settings are now configurable through Group Policy; can centrally define homes pages, security settings, history retention, etc.
• Printer installation: Location-based printer installation (shared printer connections are automatically available to computer or user side of the GPO); printer driver installation for non-administrators (installation of printer device drivers now occurs in the background with elevated privileges)
New Group Policy features in Windows Server 2008 R2 and Windows 7
1-20
Feature Description
Windows PowerShell cmdlets
• Manage Group Policy from Windows PowerShell and run Windows PowerShell scripts during logon and startup; cmdlets allow GPO configuration from command line and for automation
Group Policy Preferences
• Additional types of GPO preference items were added
Starter GPOs • New default Starter GPOs were added to the GPMC interface
Administrative Template Settings
• New user interface and additional policy settings were added; Administrative Templates section was augmented with new settings and an editor window that is easier to navigate
AppLocker • A new mechanism for restricting access to software that is only supported by Windows Server 2008 R2 and Windows 7; supports wildcards for version numbering, allowing a single policy to restrict multiple versions of a file; can restrict by user name or group
3. Match each Group Policy feature with its correct description.
1-23
Group Policy Feature Description
GPMC A. A tool used to create inbound and outbound firewall policies. IPSec functionality has been integrated directly into the interface.
Windows Firewall with Advanced Security
B. These allow GPO configuration from the command line and for automation.
AppLocker C. These set the central standard for power management settings.
Windows PowerShell cmdlets
D. A standard tool used to manage group policies.
Power management options
E. A new mechanism for restricting access to software that is only supported by Windows Server 2008 R2 and Windows 7; supports wildcards for version numbering, allowing a single policy to restrict multiple versions of a file; can restrict by user name or group.