Five Group Policy parameters for Windows logon scripts

Windows administrators have nightmares about desktop configuration control because Group Policy parameters can do almost anything that a logon script can do.

Here are five Group Policy parameters GPP for your reference

Drive Maps

Many IT organizations still use logon scripts only, because of the ability to map drive and share. Until you have GPP, logon scripts become the easiest way to correlate these drives with specific users and groups. A logon script is like a user performing a login, because adding a network share to a script makes it an H: Driver mapping to the home folder, and S: Driver mapping to the shared folder. By adding a bit of conditional scripting logic, you can map the drive based on the identity of each user.

Drive Maps is a GPP found under the user configuration of a Group Policy object. Creating your own GPP can map the same driver to the user, but will not have malicious script.

Environment variables

Not every user needs to set environment variables (environment variables), nor is it needed for every application. As a result, many logon scripts require some fairly complex logins to confirm the settings based on user, machine, or even applied variables.

GPP greatly simplifies the process. In the computer Configuration half of a Group Policy object, environment variables can be preconfigured. Even, by labeling each GPP based on a file-matching project hierarchy, you can ensure that environment variables apply only to the computers that contain those applications.

Files

Even if you want to work with settings that are not stored in the registry, are these settings in one or more files? There are still a large number of applications that use files to store their information and specific user information. Files are important because they are easy to work with and files are difficult if large numbers of large users need to be configured on a large number of machines.

The preferences in the Group Policy parameter emphasizes the fact that GPP does not need to be enforced. Using GPP to define the initial configuration of a user's or application is possible and recommended, and users can make changes as needed.

The file is not a GPP found in the GPO. This gpp can copy files from the source to the destination location. This is definitely the most useful way to copy files for applications that need them. Simply create an initial configuration, add files to GPP, and see that it is automatically distributed to any associated computer. If you want to give the user the best experience rather than the various restrictions, simply check the Apply dialog once, and no longer apply under the GPP universal table.

Registry

Although there are still some applications using configuration files, most of them are now starting to use the Windows registry. Before GPP, changing the registry is extremely difficult, especially when encountering HKEY_CURRENT_USER hive.

GPP again unlocks the application configuration through HKEY_LOCAL_MACHINE and HKEY_CURRENT_USER. You will find in the GPO registry GPP Support computer Configuration half and User Configuration half.

However, the hardest part of controlling registry values is often that they are only found. Software packaging tools can help. The Software Packaging tool analyzes the two snapshots of the system, one before the application and the other at the end. By examining the differences between the two snapshots, the wrapper tool can determine which files and registration codes have been modified during installation.

You can use the same method to find out which registry value an application setting corresponds to. Tip: Install an initial snapshot and application. Change the application settings, and then do a second snapshot. Any change is caused by entering a registered GPP.

Printers

You think you're smart because you've released printers to the Active Directory, but even the most accurate printer structure can still confuse the user. Why not find the nearest printer automatically? You can use a printer in GPP to connect to half of your computer or a user's GPO. You also need to use some of the settings on each computer to identify computer life. The common is its subnet.

If your network engineer has disconnected the subnet, you can use the network in the GPP project-level orientation. Add the network as a range of IP addresses, and the next time the user logs on, it will automatically connect to the printer closest to them.

GPPs is not a new technology. With the release of Windows Server 2008, it already exists. The technology is relatively stable, easy to use, anytime, anywhere, without the need for additional software (or plug-ins). If you haven't taken the time to use this very useful management method, consider it. Plus project-level orientation, they're a great way to end up with annoying logon scripts.