Section 8: Configuring the Desktop Environment with Group Policy Exploring Script Types and Controlling Script Execution Defining the Desktop, Start Menu, and Taskbar Settings Defining the Control Panel Settings Defining the Windows Components Settings Configuring the Printer Management and Pruning Settings Defining Network Settings New Settings for Windows 8 Client and Windows Server 2012 Managing Windows Environments with Group Policy
46
Embed
Section 8: Configuring the Desktop Environment with Group Policy Exploring Script Types and Controlling Script Execution Defining the Desktop, Start Menu,
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Section 8: Configuring the Desktop Environment with Group Policy
Exploring Script Types and Controlling
Script Execution
Defining the Desktop, Start Menu, and Taskbar Settings
Defining the Control Panel Settings
Defining the Windows Components Settings
Configuring the Printer Management and
Pruning Settings
Defining Network Settings
New Settings for Windows 8 Client and Windows Server 2012
Control which users can configure scripts by limiting the MMC snap-in using the following Administrative Templates settings:User Configuration, Administrative Templates,
Windows Components, Microsoft Management Console, Restricted/Permitted snap-ins, Group Policy, Scripts (Logon/Logoff), Scripts (Startup/Shutdown)
User Configuration, Administrative Templates, Windows Components, Microsoft Management Console, Restrict users to the explicitly permitted list of snap-ins
Computer startup and shutdown scripts: GPOs support computer-specific startup and shutdown scripts. When a workstation or server is located in an OU, it runs the assigned script in the context of the Local System account. You can use these scripts to perform cleanup or maintenance routines, even when a user is not logged on to the console of the system.
User logon and logoff scripts: Logon and logoff scripts apply to a user account that can be contained at the site, domain, or OU container, or all of these locations. These scripts are typically used to map drives or perform other activities that are not found as part of typical Group Policy settings.
To restrict the operations that users can perform on their computers, go to the Group Policy console settings under the User Configuration node. Some settings are located under the Policies subnode, while others are found under the Administrative Templates subnode. You can set many different restrictions to the following:
Desktop Start menu Taskbar Control Panel Windows Explorer Windows Internet Explorer
Most of the Remote Desktop Services policies appear in the Group Policy console under the Computer Configuration node, although you can set a few timeouts in the User Configuration node.
To configure the printer management and pruning settings, go to Computer Configuration, Administrative Templates, and Printers node in the Group Policy console. Some User Configuration client-side printer settings exist in Control Panel.
3. Internet Explorer settings exist in three primary locations in the Group Policy console. Name them. Computer Configuration, Policies, Administrative
Templates, Windows Components, and Internet Explorer
User Configuration, Policies, Administrative Templates, Windows Components, and Internet Explorer
Computer Configuration, Policies, Windows Settings, and Internet Explorer Maintenance
4. In which node of the Group Policy console (Computer Configuration or User Configuration) would you expect to find DNS settings? Why?Computer Configuration, because the settings apply to the computer as a whole
5. Which setting would you use to prevent users from applying patches and updates, block access to the Windows Update Web site, and remove the Windows Update hyperlink from the Start menu and from the Tools menu in Windows Internet Explorer? (Hint: Go to User Configuration, Policies, Administrative Templates, and Start Menu and Taskbar.)Remove links and access to Windows Update
6. What types of scripts does the following text describe?
These scripts apply to a user account that can be contained at the site, domain, or OU container, or all of these locations. These scripts are typically used to map drives or perform other activities that are not found as part of typical Group Policy settings.User logon and logoff scripts