Windows Group Policy Tips & Tricks
Windows features a set of rules known as the Group Policy that can be used to manage multiple computer systems across a corporate LAN. It first showed up in the Windows 2000 Server edition. Since then, its capabilities have grown by leaps and bounds alongside the release of superior operating systems like Windows Vista, Windows 7 and Windows 2008/R2 Server. Thus, each iteration has brought with it an abundance of new functions designed to make life much easier for network administrators.
-
Power Consumption
-
Windows permits you to decrease power consumption among all your server's users, laptops and desktops via the Group Policy. These settings can be found under Computer Configuration, Preferences, Control Panel Settings, Power Options / User Configuration, Preferences, Control Panel Settings and Power Options. You can create server-wide power schemes or override the scheme for a particular user.
PowerShell Scripts
-
The latest Group Policy version, as of publication date, is compatible with PowerShell scripts, meaning you can automate some policy-related tasks. Keep in mind that the actions performed from a script, and thus their results, are only active for the life span of the script. Therefore, PowerShell scripts are only optimal for tasks such as moving files between clients and servers, organizing the event log or making backups.
-
Software Restrictions
-
Another available function is the ability to block unwanted software applications from being installed on your network. This is possible because of the AppLocker policy. It will override any local software restriction policies. As an example, if the global policy blocks users from installing Firefox but a specific machine's local policy allows it, AppLocker will supersede the policy and block the user from installing it.
Group Policy Management Console
-
The Group Policy Management Console, or GPMC, is an essential downloadable add-on that provides access to many of the previously mentioned policy features. It comes bundled with the Remote Server Administration Tools, or RSAT. Once you install RSAT, you will then need to configure it to download and install GPMC, which can be done through the Remote Server Administration Tools.
-
References
- Quest Software: Top Seven Tips and Tricks for Group Policy In Windows 7 (PDF)
- Microsoft TechNet Magazine: Sustainable Computing - Enforce Power Management Settings In Your Organization With Group Policy
- Microsoft TechNet: Use Windows PowerShell to Manage Group Policy
- Microsoft TechNet: Using Software Restriction Policies With AppLocker Policies
Resources
- Photo Credit Stockbyte/Stockbyte/Getty Images