Microsoft’s official Group Policy blog
I just got back from another great MMS in Las Vegas and I’d like to thank everyone who stopped by the booth, attended the Group Policy-related sessions, and asked great questions about Group Policy and AGPM (thanks to Chris for Tweeting about it!). I’m so glad to see that more and more people are using Group Policy Preferences.
Are you using Group Policy Preferences in your environment? Do you have an interesting example of targetting? A great drive mapping? Post your examples in the comments. (just copy and paste the relevant XML and/ or describe what you did)
For those of you who are curious about the specific blog posts I mentioned with script samples, here they are:
Drive Mapping with GP Preferences
Find any setting in every GPO (part 1, part 2) (PowerShell script)
Set a registry key (PowerShell cmdlet)
Backup all GPO’s modified in the last month (PowerShell script)
Troubleshooting using the Event Viewer
TechEd is right around the corner and we Group Policy folks will be there to keep talking about these topics, answer questions, and be our charming Group Policy selves. Come say hi to Michael, and be sure to ask him about his New Zealand accent.
LiliaG, Group Policy PM
Remember those jerks in your last session at MMS that claimed to have over 500 GPOs in their environment? I'm one of them. I just checked our sysvol\policies folder ... there 2887 GPO folders in there! Out of control.
Yesterday I used GP Preferences to make sure Symantec AntiVirus on our clients is managed by the right server. I used the File node to add a new file to the machine; the source file was a GRC.DAT file on the SAV server, and the destination was a folder in %CommonAppDataDir% on the client.
This GPO will replace one that has been using a startup script to copy the file from the server to the client.
Hey SubtleCoolness -
2887 GPOs is impressive! How many different people are managing Group Policy? I seem to remember you mentioning that your organization also uses AGPM, remember that in 3.0 you can limit the number of backups to keep around so you're not taking up too much space with all of those GPOs.
Great example of Preferences, thanks for sharing it. Let me know if there's something you'd like to do with Preferences (or with GP in general) that you still have in a startup script.
Hi I use Global Policy Preferences to control the settings of Oracle Jinitiator.
I treat the %USERPROFILE%\.jinit\properties13122 file as an ini file.
Specifically I set the following properties
jarcache.directory = %AppDataDir%\Oracle Jar Cache
javaplugin.console = true
javaplugin.jre.params = -Xmx128m
As for your question about logon scripts we do a lot with Outlook profiles and signatures as well as setting the Office user details via log on script. As well as a few other bits and bobs.
I seen your BOF session at MMS on GPP (wow, a lot of acronyms there). I have one question, ok, maybe 2. Can you edit prefernces with XP or do you need Vista/2008? If so, how do you get them to display in XP?
I installed the XMLLite and the client extentions on an XPSP3 workstation but I don't see them in GPMC > %policy object% > edit. We don't have any Vista machines and I only have 1 Server 2008 box in one of about 3 environments I manage.
Good question, to manage GP Preferences, you have to run Vista SP1 (with the GPMC installed from RSAT) or Windwos Server 2008, at least.
There are power management and scheduled tasks updates to Preferences that you can only manage from Windows 7 client / Windows Server 2008 R2.
Check out the requirements for managing Preferences here: