Managing Group Policy Preferences in Server 2022
Posted on 18th June 2023
Overview
Group Policy Preferences (GPP) is a feature of Group Policy introduced in Windows Server 2008. GPP allows administrators to manage registry-based policy settings, files, and folders, shortcut creation, and control panel settings. GPP replaces many of the tasks that were previously performed using scripts.
Group Policy Preferences Overview
GPP provides a central location to manage registry-based policy settings, files, and folders, shortcut creation, and control panel settings. GPP replaces many of the tasks that were previously performed using scripts.
Registry-based policy settings
GPP provides a central location to manage registry-based policy settings. Registry-based policy settings are stored in the registry and can be applied to both user and computer accounts.
Files and folders
GPP provides a central location to manage files and folders. Files and folders can be deployed to user and computer accounts.
Shortcut creation
GPP provides a central location to manage shortcut creation. Shortcuts can be deployed to user and computer accounts.
Control panel settings
GPP provides a central location to manage control panel settings. Control panel settings can be deployed to user and computer accounts.
Group Policy Preferences Requirements
GPP requires the following:
- Windows Server 2008 or later
- Active Directory Domain Services (AD DS)
- Group Policy Objects (GPOs)
- Group Policy Management Console (GPMC)
Group Policy Preferences Components
Group Policy Management Console
The Group Policy Management Console (GPMC) is a Microsoft Management Console (MMC) snap-in that provides a single administrative console for managing Group Policy. GPMC is included in Windows Server 2008 and later.
Group Policy Object Editor
The Group Policy Object Editor (GPOE) is a MMC snap-in that provides a graphical user interface (GUI) for editing Group Policy objects (GPOs). GPOE is included in Windows Server 2008 and later.
Group Policy Management Console Extensions
GPMC extensions are provided for the following:
- IIS Manager
- Printers
- Data Sources
- Drive Maps
- Folder Redirection
- Ini Files
- Scheduled Tasks
- Services
- Startup/Shutdown Scripts
- Shortcuts
- Power Management
- Registry
- Restricted Groups
- Files
- Folders
- Local Users and Groups
- Printers
- Data Sources
- Scheduled Tasks
- Services
- Startup/Shutdown Scripts
- Shortcuts
- Power Management
- Registry
- Restricted Groups
- Files
- Folders
Group Policy Preferences Process
Group Policy Management Console
To manage Group Policy preferences using the Group Policy Management Console (GPMC), you must first install the GPMC on a computer that is running Windows Server 2008. The GPMC is not installed by default on computers that are running Windows Server 2008.
Group Policy Object Editor
To edit Group Policy objects (GPOs) using the Group Policy Object Editor (GPOE), you must first install the GPOE on a computer that is running Windows Server 2008. The GPOE is not installed by default on computers that are running Windows Server 2008.
Group Policy Preferences Tasks
Create and Edit Group Policy Objects
To create and edit Group Policy objects (GPOs), you must use the Group Policy Management Console (GPMC) or the Group Policy Object Editor (GPOE).
Deploy Group Policy Preferences
Group Policy preferences can be deployed using Group Policy objects (GPOs). GPOs can be deployed using the Group Policy Management Console (GPMC) or the Group Policy Object Editor (GPOE).
Group Policy Preferences Best Practices
Create a test environment
Before you deploy Group Policy preferences in your production environment, you should create a test environment. The test environment should be as similar to the production environment as possible.
Deploy Group Policy preferences using Group Policy objects
Group Policy preferences should be deployed using Group Policy objects (GPOs). GPOs can be deployed using the Group Policy Management Console (GPMC) or the Group Policy Object Editor (GPOE).
Monitor Group Policy preferences
You should monitor Group Policy preferences to ensure that they are working as expected. Monitoring can be done using the Group Policy Management Console (GPMC) or the Group Policy Object Editor (GPOE).
In Server 2012 R2, you can manage Group Policy Preferences (GPP) using either the Group Policy Management Console (GPMC) or the Group Policy Object Editor (GPOE). However, in Server 2016 and later, GPP can only be managed using the GPMC.
When you open the GPMC, you will see a list of the Group Policy Objects (GPOs) in the domain. To edit a GPO, right-click on it and select Edit.
In the GPO Editor, go to the User Configuration -> Preferences -> Control Panel Settings -> Scheduled Tasks folder. Right-click on the Scheduled Tasks folder and select New -> Scheduled Task (At Least Windows Vista).
In the New Scheduled Task dialog, you can configure the various settings for the task, such as the name, description, security options, and trigger. Once you have configured the settings, click OK to save the task.
If you need to deploy a scheduled task to a group of computers, you can use the Group Policy Object Editor to create a GPO that will deploy the task to the computers in the specified OU. To do this, open the Group Policy Object Editor and go to the Computer Configuration -> Preferences -> Control Panel Settings -> Scheduled Tasks folder. Right-click on the Scheduled Tasks folder and select New -> Scheduled Task (At Least Windows Vista).
In the New Scheduled Task dialog, you can configure the various settings for the task, such as the name, description, security options, and trigger. Once you have configured the settings, click OK to save the task.
You can then link the GPO to the OU that contains the computers that you want to deploy the task to. The task will then be deployed to the computers in the OU when they receive the GPO.
