MCITP 70-640: Group Policy New Features

This video looks at the new features in Group Policy that are available in Windows Server 2008 and Windows Server 2008 R2.

New Features
Windows Server 2008 adds the following features: comments, Starter Group Policy Objects, integration with Network Location Awareness, Preferences, and the new ADMX format.
Windows Server 2008 R2 adds the ability for Group Policy to be administered from

PowerShell.
Group Policy Comments
All Group Policy settings allow comments to be added. Comments allow an administrator to leave a comment for all Group Policy settings which help other administrators understand why the Group Policy was configured the way it was.

Starter Group Policy Objects
Starter Group Policy Objects is essentially a template. Once you create a Starter Group Policy Object you can copy this to a new Group Policy. Since part of Group Policy is called Administrative Templates this is probably why Microsoft uses the name Starter Group Policy Objects rather than calling it a template. The limitation with Starter Group Policy Objects is that they can only be used to configure Administrative Templates.

Network Location Awareness
Group Policy now integrates with the Network Awareness Services. This means that when a network becomes available, for example a VPN connection is established, a wireless network becoming available, or simply a network cable being plugged in, Group Policy will check for updates on the network. Previously Group Policy would only check at certain intervals and if the network was not available when it checked, then Group Policy may never be updated.

Preferences
Preferences was a 3rd party product that was integrated in Windows Server 2008 just before release. It adds a lot of flexibility to Group Policy allowing an administrator to configure settings like printers and drive mapping. Unlike Group Policy, the user is free to overwrite or delete what has been configured, however Preferences will attempt to reapply the settings at the next Group Policy Refresh. This means the user can remove settings like a mapped drive and replace it with another mapped drive if they wish. The major feature with Group Policy is that it allows targeting to particular groups, computer types, software, and hardware, just to name a few.

PowerShell
If you are running Windows Server 2008 R2 or Windows 7, you can perform Group Policy administration from PowerShell. Many functions are included like managing Group Policy settings and creating starter GPO's.

ADM File
The ADM file was used with Group Policy before Windows Server 2008 was released. The ADM file contains all the settings that are found under Administrative Templates. Each time a new Group Policy is created, the settings for the Group Policy is stored in the SysVol share. The ADM file is also stored with the Group Policy setting. This means that Group Policy using the ADM does not scale well as it makes the SysVol share very large. Also once a Group Policy is created it is linked to the one ADM file. The ADM file only supports one language so if multiple administrators were working on the same Group Policy one language would need to be agreed between all administrators.

ADMX File
The ADMX file replaces the old ADM file. It was first introduced in Windows Server 2008, however if you download the latest Group Policy Management software you can use the ADMX files in early Windows Servers. ADMX is an XML based format making it easy to edit. ADM is an in-house format so it is not as easy to work with as XML files are. The format is made up of two parts. The ADMX file defines the Group Policy settings. The ADML file contains the language to be used with the file. This means the ADMX file can easily be used with any language assuming an ADML file for the language exists. Both ADM and ADMX output the same files so regardless which format is used, they will be compatible with old and new clients.

References

[itfreetraining]

Glad you like the videos. We can only make them free because of the advertising on the videos. We wish we could make off line copies of the videos, but this is not possible at the present as we would have no way of paying our staff.

[itfreetraining]

No problem at all, thanks for watching.

[subteran]

Awesome videos !!! I've told all my IT friends about your videos and your website . Love what ur doing !

[nissar]

it's very helpful for us your training videos, thanks a lot team👏👏

[romanjakhiashvili]

I didnt get what is the difference between admx and registry.pol? what means settings file and define settings file? 9:05