350 likes | 579 Views
Required Slide. SESSION CODE: WCL322. MDOP: Advanced Group Policy Management 4.0 . Mark Gray Program Manager Microsoft Corporation. What We Want. meat (start) mat (removed ‘e’) man (changed ‘t’ to ‘n’) mane (added ‘e’) mine (changed ‘a’ to ‘i’).
E N D
Required Slide SESSION CODE: WCL322 MDOP: Advanced Group Policy Management 4.0 Mark Gray Program Manager Microsoft Corporation
What We Want meat(start) mat(removed ‘e’) man(changed ‘t’ to ‘n’) mane(added ‘e’) mine(changed ‘a’ to ‘i’) Know what changed and undo bad changes
Agenda • GPO Management • Offline editing • Search • Multi forest • Auditing • History • Reporting • Workflow • Permissions • Delegation • Architecture
Offline Editing • Edit GPOs offline before deploying live
Templates • Use templates to create consistent GPO’s • Supports all GPO content
Search (Filtering) • What it does • Filters GPOs by properties • Allows for column precision • Maintains a list of the recent 10 searches • What it doesn’t do • Search for settings
Multi Forest Support • What it does • Allows GPO movement from AGPM to AGPM • Preserves origin metadata • Supports migration tables • What it doesn’t do • Online moves between domains/forests • GPP and Migration Tables limitation
Windows 7/Server 2008 R2 • What is supported • Group Policy Preferences • Reporting for all new extensions • Applocker, DNSSEC, IE8, Scheduled Tasks • Service • RSAT
GPO Management Authoring Demo
Auditing Get complete details on what happened, who did it, and why
History History is a list of complete backups Rollback to Known good GPO version Safeguard live environment from unapproved changes and untested settings
GPO Management History Demo
Reporting • Settings • Parity with Group Policy settings reports • Difference Security Template Security Kiosk GPO 1.0 GPO A GPO B GPO 1.5 vs
Differences Compare settings between GPOs added changed removed
GPO Management Reporting Demo
Agenda • GPO Management • Offline editing • Search • Multi forest • Auditing • History • Reporting • Workflow • Permissions • Delegation • Architecture
Permissions - Roles • Define granular control without making everyonea Domain Admin • Approver • Reviewer • Editor • Full Control
Workflow • Create a repeatableworkflow that youcan track Offline
Workflow Permissions and delegation Demo
Agenda • GPO Management • Offline editing • Search • Multi forest • Auditing • History • Reporting • Workflow • Permissions • Delegation • Architecture
Architecture Production Archive/Offline AGPM Server Domain Controller GPO 1 GPO 2 XML File of backups GPO 2 Direct link GPO 1 Server Component Backups of GPO 2 Backups GPO 1 Direct link AGPM Client (GPMC) Admin Component Administrative Desktop
Service Production Archive/Offline AGPM Server Domain Controller GPO 1 GPO 2 GPO 2 GPO 1 AGPM Client (GPMC) Administrative Desktop
Required Slide Track PMs will supply the content for this slide, which will be inserted during the final scrub. AGPM Resources • MDOP Blog http://blogs.technet.com/MDOP/ • MDOP TechNet page http://www.microsoft.com/technet/mdop/ • Group Policy TechNet page http://www.microsoft.com/technet/grouppolicy • Group Policy Team Bloghttp://blogs.technet.com/grouppolicy
Required Slide Speakers, please list the Breakout Sessions, Interactive Sessions, Labs and Demo Stations that are related to your session. Related Content • WCL323 - Rm295 Thursday, June 10 5:00 PM - 6:15 PMHow to Save Money, Time, and Headaches with Group Policy in Windows 7 / Windows Server 2008 R2
Required Slide Track PMs will supply the content for this slide, which will be inserted during the final scrub. Track Resources • Learn about Windows Client Development: http://developforwindows.com • Try out the Internet Explorer 9 Platform Preview: www.ietestdrive.com • Interested in Windows hardware or software? Check it out: http://ReadySet7.com
Required Slide Resources Learning • Sessions On-Demand & Community • Microsoft Certification & Training Resources www.microsoft.com/teched www.microsoft.com/learning • Resources for IT Professionals • Resources for Developers • http://microsoft.com/technet • http://microsoft.com/msdn
Required Slide Complete an evaluation on CommNet and enter to win!
Sign up for Tech·Ed 2011 and save $500 starting June 8 – June 31st http://northamerica.msteched.com/registration You can also register at the North America 2011 kiosk located at registrationJoin us in Atlanta next year
© 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.