Five Group Policy Parameters for Windows Login Scripts

Windows administrators have a nightmare of desktop configuration control, because Group Policy parameters can do almost everything a login script can do.

The following are five Group Policy parameters for your reference

Drive Maps

Many IT organizations still only use login scripts because of the ability to map drivers and share them. Until GPP is available, login scripts are the easiest way to associate these drivers with specific users and groups. The login script is similar to the user performing the login because adding a network share to the script makes it H: the driver maps to the home folder, and the S: driver maps to the shared folder. By adding a bit of conditional scripting logic, the driver can be mapped based on the identity of each user.

Drive Maps is a GPP discovered under the user configuration of a Group Policy object. Creating your own GPP can map the same driver to the user, but there won't be malicious scripts.

Environment variables

Not every user needs to set Environment variables, nor is it required for every application. Therefore, many login scripts require some fairly complex logins to confirm variable settings based on users, machines, and even applications.

GPP greatly simplifies this process. Environment variables can be preconfigured in the Computer Configuration half of the Group Policy object. Even by tagging each GPP file-based matching project hierarchy target, it is ensured that the environment variables are only applicable to the computers that contain these application needs.

Files

Even if you want to work with applications that are not stored in the registry, are these settings in one or more files? There are still a large number of applications that use files to store their information and information about specific users. Files are important because they are easy to work with and files are difficult, if a large number of large users need to be configured on a large number of machines.

The preferences in Group Policy parameters emphasize the fact that GPP does not need to be enforced. It is possible and recommended to use the GPP to define the initial configuration of the user or application, and then the user can make changes as needed.

The file is not the GPP found in the GPO. This GPP can copy files from the source to the destination. For applications that need them, this is definitely the most useful way to copy files. Simply create the initial configuration, add files to GPP, and see it automatically distributed to any relevant computer. If you want to provide users with the best experience instead of various restrictions, just check the Apply dialog once and no longer apply under the GPP General Table.

Registry

Although there are still some applications that use configuration files, most of them are currently using the Windows registry. Prior to GPP, changing the registry was extremely difficult, especially when HKEY_CURRENT_USER hive was encountered.

GPP unlocks application configuration again via HKEY_LOCAL_MACHINE and HKEY_CURRENT_USER. You will find the registry GPP supports Computer Configuration half and User Configuration half in the GPO.

However, the hardest part of controlling registry values ​​is often to find them. Software packaging tools can help. The software wrapper analyzes two snapshots of the system, one before the application and the other at the end. By examining the differences between the two snapshots, the wrapper tool can determine which files and registration keys were modified at the time of installation.

You can use the same method to find out which registry value an application setting corresponds to. Tip: Install the initial snapshot and application. Change the application settings and make a second snapshot. Any changes are caused by entering the registered GPP.

Printers

You think you are smart because you have already released the printer to Active Directory, but even the most accurate printer structure can still confuse users. Why not find the nearest printer automatically? You can use a printer in GPP to connect to a computer or half of a user's GPO. You also need to identify the computer life with some settings on each computer. Common is its subnet.

If your network engineer has disconnected the subnet, you can use it in the project level guidance of GPP. Add the network as an IP address range, and the next time the user logs in, they will automatically connect to the printer closest to them.

GPPs are not new technologies. With the release of Windows Server 2008, it already exists. The technology is stable, easy to use, and easy to use anytime, anywhere, without the need for additional software (or plug-ins). If you haven't taken the time to use this very useful management approach, consider it. Coupled with project-level orientation, they are a great way to finally eliminate those annoying login scripts.

The above is the five group policy parameters of the Windows login script that this small series introduces for you. Please take a look at the users who need it. If you want to know more exciting tutorials, please continue to pay attention to this website!