Five Windows Group Policy options to be implemented immediately

Microsoft's group strategy for centralized management solutions will celebrate its 10th birthday this year. What is surprising in terms of management is that Microsoft does not add additional costs to this solution. I am still surprised that group policies are not used in the IT industry. After its release with Windows 2000 Server, it became apparent through 10 years of seminars, conference lectures, books, and training.
A new group policy option (GPPs) is added to the function set of Windows Server 2008 ). In such an article, you may not need to explain what GPPs is and how they work. What is important is that these "optional" (If You Want) "How does the configuration project actually help solve the problem in the Windows domain.
With this in mind, let's take a look at the five group policy options that must be implemented. Once you understand what they can do, you will find that they are very suitable for your environment.
　　 Internet Settings
The first setting may be the most painful one so far. Based on its original interface and complete success, the customer needs to be able to actually keep the settings you want. configuring the internal settings of Internet Explorer (IE) through the traditional group policy has always been a nightmare.
Earlier Internet Explorer Maintenance console problems focus on the limitations of traditional group policies. Using this tool to configure iesettings allows you to import customer settings from a prototype (that is, a machine running the console)-nothing else. This complicated interface forces the Administrator to make changes without intention when trying to view the configuration.
By performing operations on the actual IE attribute screen based on the version you want to configure, the configuration settings for Group Policy Options (GPPs) become more logical. In addition, GPPs can be set as optional while some options are required. They also provide precise and easy-to-use positioning capabilities to ensure that you send the correct settings to the right computer.
　　 Driver ing
In an environment that does not support group policy options, the biggest reason for retaining the logon script is the need for driver ing. Users are used to using H: as the main drive, and S: as the shared drive (or any other name you remember ). They were frustrated by the need to reset the drive name when changing their computer.
Using the driver ing GPP under the user configuration, you can ensure that the target drive is mapped to the user set based on who they are rather than where they are. This is a major improvement for traditional login scripts that require handwriting and specific machines.
Further, the Group Policy options not only allow you to create and manage driver mappings, but also remove them when you finish your work or need to make changes. With GPPs, you can simply modify the resources under the driver ing to reconfigure it. Because the Group Policy Processing latency is very small, your users have a solution that allows almost seamless access to the required data.
　 Service
In computer configuration, you will also find another enhanced tool for managing services, as well as their startup modes, accounts, and recovery options.
If you have a security policy or compatibility rule that requires special management of services (who does not need to do so now ?), You will find that the Service GPP significantly improves the guarantee for the Service to be correctly configured. This group policy option has an attribute dialog box that displays well-known services in the domain and provides regions for configuration, and can be set as optional or required configuration and very specific tasks like all CPPs.
In addition, if your auditor needs to see verifiable evidence that you correctly configure the service, you can use your CPP settings to see exactly what service is locked and why.
　　 Local users and groups
In almost every IT environment, users and groups of customers need to be transferred to the local users and group console for management. Although each user or his/her computer has individual requirements, almost every environment wants to add a local IT Global Group to the Administrator group, to ensure that non-domain technicians can access the desktop.
It has always been difficult to use other tools to do this. Many environments are entangled in the problem of adding Group tasks to their reference images or build processes when they go out. Some smarter solutions use scripts to solve the problem.
By using the Group Policy Option marked to the local computer, you can now use a simple screen to add the correct users and groups to the target computer. With this console, you only need to add group names and their members, and then set appropriate computer permissions for GPP. Then, you can obtain the required access and ensure that it exists for a long time.
　　 Data Source
The last is the long-standing problem of configuring data sources for database-driven applications. Even the most persistent IT professionals sometimes stick to their heads when remembering how to correctly set up ODBC connections for computers. But when you can create an ODBC connection at a time and provide it to users who need it, why bother with separate configuration?
This configuration may be accompanied by the data source configured by the user. Using this console, you may be able to create an ODBC connection, its DSN, driver, attributes, and login information, and immediately mark the person to be connected to the application you are using. If your style is to operate a large computer, you can also use the data source as a group policy option for computer configuration.
These five GPPs can be used as your start point, but they are only a small part of the centralized configuration that can be provided by Group Policy options ...... No price! In my next article, I will further introduce the details of the task GPP. You will find that it is very easy to plan activities using this console (and a little instruction.