Microsoft Virtual Academy

Module 5

Managing User Desktops with Group

Policy

Module Overview
Configuring Folder Redirection and Scripts
Configuring Group Policy Preferences
Managing Software with Group Policy

Configuring Folder Redirection and

Scripts

Lesson 1: Configuring Folder Redirection and Scripts

What Is Folder Redirection?
Settings for Configuring Folder Redirection
Security Settings for Redirected Folders
Demonstration: Configuring Folder Redirection
Group Policy Settings for Applying Scripts
Demonstration: Configuring Scripts with GPOs

What Is Folder Redirection?

Folder redirection is a feature that allows folders to be

located on a network server, but appear as if they are

located on the local drive
Folders that can be redirected in Windows Vista and later
are:
Favorites

Desktop
Start Menu
Documents
Pictures
AppData\Roaming
Contacts
Downloads

Saved Games
Searches
Links
Music
Videos

Settings for Configuring Folder Redirection

Folder redirection configuration options:
Use Basic folder redirection when all users
save their files to the same parent location

Accounting
Users

Use Advanced folder redirection when

the server hosting the folder location
is based on group membership

Accounts
A-M

Use the Follow the Documents folder to force certain folders to

become subfolders of Documents

Accounts
N-Z

Target folder location options:

Redirect to the users home directory
(Documents folder only)
Create a folder for each user under the
root path
Redirect to the following location
Redirect to the local user profile location

Accounting
Managers

Amy

Anne

Security Settings for Redirected Folders

NTFS permissions for root folder
Creator/Owner

Full control subfolders and files

only

Administrator

None

Security group of users

List Folder/Read Data, Create
that save data on the
Folders/Append Data-This Folder Only
share
Share permissions for root folder
System
Full control
Creator/Owner
Full control subfolders and files
only
Security group of users
Full control
that save data on the
share
NTFS permissions for each users redirected folder
Creator/Owner
Full control subfolders and files
only
%Username%

Full control, owner of folder

Administrators

None

System

Full control

Demonstration: Configuring Folder Redirection

In this demonstration, you will see how to:
Create a shared folder for folder redirection
Create a GPO to redirect the Documents folder

Group Policy Settings for Applying Scripts

You can use scripts to perform many tasks, such as

clearing page files or mapping drives, and clearing temp

folders for users

You can assign Group Policy script settings to assign:

For computers:
Startup scripts
Shutdown scripts
For users:
Logon scripts
Logoff scripts

Demonstration: Configuring Scripts with GPOs

In this demonstration, you will see how to:
Create a login script to map a network drive
Create and link a GPO to use the script and store the script
in the Netlogon share

Configuring Group Policy Preferences

Lesson 2: Configuring Group Policy Preferences

Comparing Group Policy Preferences and Administrative
Templates
Features of Group Policy Preferences
Item-Level Targeting Options
Demonstration: Configuring Group Policy Preferences

Comparing Group Policy Preferences and Administrative

Templates
Group Policy settings

Group Policy Preferences

Strictly enforce policy settings

by writing the settings to areas
of the registry that standard
users cannot modify

Are written to the normal

locations in the registry that the
application or operating system
feature uses to store the setting

Typically disable the user

interface for settings that
Group Policy is managing

Do not cause the application or

operating system feature to
disable the user interface for the
settings they configure

Refresh policy settings at a

regular interval

Refresh preferences by using the

same interval as Group Policy
settings by default

Features of Group Policy Preferences

Common Tab

Is used to configure
additional options that
control the behavior of a
Group Policy preference item

Targeting Features

Determines to which users

and computers a preference
item applies

Item-Level Targeting Options

Target 27 different categories
Combine different categories together by using AND or OR

Boolean logic. Instead of using a single category for

targeting, you can use multiple categories
Item-level targeting is refreshed during the Group Policy
background refresh

Demonstration: Configuring Group Policy Preferences

In this demonstration, you will see how to:
Configure a desktop shortcut with Group Policy preferences
Target the preference
Configure a new folder with Group Policy preferences
Target the preference

Managing Software with Group Policy

Lesson 3: Managing Software with Group Policy

How Group Policy Software Distribution Helps to Address the
Software Lifecycle
How Windows Installer Enhances Software Distribution
Assigning and Publishing Software
Managing Software Upgrades by Using Group Policy
Demonstration: Deploying software by using Group Policy

How Group Policy Software Distribution Helps to Address

the Software Lifecycle
1

1.0
Preparation

Deployment

2.0
Removal

Maintenance

How Windows Installer Enhances Software Distribution

Windows Installer:
Windows Installer
service:
Fully automates the
software installation and
configuration process
Modifies or repairs an
existing application
installation

Windows Installer package

contains:
Information about installing or
uninstalling an application
An .msi file and any external
source files
Summary information about the
application
A reference to an installation point

Benefits of using Windows Installer:

Custom installations
Resilient applications
Clean removal

Assigning and Publishing Software

Assign software
during computer
configuration

Software
Distribution Share

Publish software
using Add or
Remove
Programs

Assign software
during user
configuration

Publish software
using extension
activation

Managing Software Upgrades by Using Group Policy

Deploy next
version of
the
application

Users can
use only the
upgraded
version

2.0
Mandatory upgrade

2.0

2.0

1.0

Users can
decide when
to upgrade

Optional upgrade

2.0

1.0
Selective upgrade

You can
select
specific users
for an
upgrade

Demonstration: Deploying software by using Group Policy

In this demonstration, you will see how to:
Deploy software by using Group Policy

Additional Resources & Next Steps

Instructor-Led
Courses
20411C: Administering

Windows Server 2012

Books

Exam Ref 70-411:

Administering Windows
Server 2012

Exams &
Certifications
Exam 70-411: Administering

Windows Server 2012