Microsoft Virtual Academy
Module 5
Managing User Desktops with Group
Policy
Module Overview
Configuring Folder Redirection and Scripts
Configuring Group Policy Preferences
Managing Software with Group Policy
Configuring Folder Redirection and
Scripts
Lesson 1: Configuring Folder Redirection and Scripts
What Is Folder Redirection?
Settings for Configuring Folder Redirection
Security Settings for Redirected Folders
Demonstration: Configuring Folder Redirection
Group Policy Settings for Applying Scripts
Demonstration: Configuring Scripts with GPOs
What Is Folder Redirection?
Folder redirection is a feature that allows folders to be
located on a network server, but appear as if they are
located on the local drive
Folders that can be redirected in Windows Vista and later
are:
Favorites
Desktop
Start Menu
Documents
Pictures
AppData\Roaming
Contacts
Downloads
Saved Games
Searches
Links
Music
Videos
Settings for Configuring Folder Redirection
Folder redirection configuration options:
Use Basic folder redirection when all users
save their files to the same parent location
Accounting
Users
Use Advanced folder redirection when
the server hosting the folder location
is based on group membership
Accounts
A-M
Use the Follow the Documents folder to force certain folders to
become subfolders of Documents
Accounts
N-Z
Target folder location options:
Redirect to the users home directory
(Documents folder only)
Create a folder for each user under the
root path
Redirect to the following location
Redirect to the local user profile location
Accounting
Managers
Amy
Anne
Security Settings for Redirected Folders
NTFS permissions for root folder
Creator/Owner
Full control subfolders and files
only
Administrator
None
Security group of users
List Folder/Read Data, Create
that save data on the
Folders/Append Data-This Folder Only
share
Share permissions for root folder
System
Full control
Creator/Owner
Full control subfolders and files
only
Security group of users
Full control
that save data on the
share
NTFS permissions for each users redirected folder
Creator/Owner
Full control subfolders and files
only
%Username%
Full control, owner of folder
Administrators
None
System
Full control
Demonstration: Configuring Folder Redirection
In this demonstration, you will see how to:
Create a shared folder for folder redirection
Create a GPO to redirect the Documents folder
Group Policy Settings for Applying Scripts
You can use scripts to perform many tasks, such as
clearing page files or mapping drives, and clearing temp
folders for users
You can assign Group Policy script settings to assign:
For computers:
Startup scripts
Shutdown scripts
For users:
Logon scripts
Logoff scripts
Demonstration: Configuring Scripts with GPOs
In this demonstration, you will see how to:
Create a login script to map a network drive
Create and link a GPO to use the script and store the script
in the Netlogon share
Configuring Group Policy Preferences
Lesson 2: Configuring Group Policy Preferences
Comparing Group Policy Preferences and Administrative
Templates
Features of Group Policy Preferences
Item-Level Targeting Options
Demonstration: Configuring Group Policy Preferences
Comparing Group Policy Preferences and Administrative
Templates
Group Policy settings
Group Policy Preferences
Strictly enforce policy settings
by writing the settings to areas
of the registry that standard
users cannot modify
Are written to the normal
locations in the registry that the
application or operating system
feature uses to store the setting
Typically disable the user
interface for settings that
Group Policy is managing
Do not cause the application or
operating system feature to
disable the user interface for the
settings they configure
Refresh policy settings at a
regular interval
Refresh preferences by using the
same interval as Group Policy
settings by default
Features of Group Policy Preferences
Common Tab
Is used to configure
additional options that
control the behavior of a
Group Policy preference item
Targeting Features
Determines to which users
and computers a preference
item applies
Item-Level Targeting Options
Target 27 different categories
Combine different categories together by using AND or OR
Boolean logic. Instead of using a single category for
targeting, you can use multiple categories
Item-level targeting is refreshed during the Group Policy
background refresh
Demonstration: Configuring Group Policy Preferences
In this demonstration, you will see how to:
Configure a desktop shortcut with Group Policy preferences
Target the preference
Configure a new folder with Group Policy preferences
Target the preference
Managing Software with Group Policy
Lesson 3: Managing Software with Group Policy
How Group Policy Software Distribution Helps to Address the
Software Lifecycle
How Windows Installer Enhances Software Distribution
Assigning and Publishing Software
Managing Software Upgrades by Using Group Policy
Demonstration: Deploying software by using Group Policy
How Group Policy Software Distribution Helps to Address
the Software Lifecycle
1
1.0
Preparation
Deployment
2.0
Removal
Maintenance
How Windows Installer Enhances Software Distribution
Windows Installer:
Windows Installer
service:
Fully automates the
software installation and
configuration process
Modifies or repairs an
existing application
installation
Windows Installer package
contains:
Information about installing or
uninstalling an application
An .msi file and any external
source files
Summary information about the
application
A reference to an installation point
Benefits of using Windows Installer:
Custom installations
Resilient applications
Clean removal
Assigning and Publishing Software
Assign software
during computer
configuration
Software
Distribution Share
Publish software
using Add or
Remove
Programs
Assign software
during user
configuration
Publish software
using extension
activation
Managing Software Upgrades by Using Group Policy
Deploy next
version of
the
application
Users can
use only the
upgraded
version
2.0
Mandatory upgrade
2.0
2.0
1.0
Users can
decide when
to upgrade
Optional upgrade
2.0
1.0
Selective upgrade
You can
select
specific users
for an
upgrade
Demonstration: Deploying software by using Group Policy
In this demonstration, you will see how to:
Deploy software by using Group Policy
Additional Resources & Next Steps
Instructor-Led
Courses
20411C: Administering
Windows Server 2012
Books
Exam Ref 70-411:
Administering Windows
Server 2012
Exams &
Certifications
Exam 70-411: Administering
Windows Server 2012
