Jump to content

What’s new with Group Policy in Windows 8

Arthur

By Arthur
in Windows 8

 Share

Recommended Posts

Arthur

Arthur

Posted
Posted

I'm sure Microsoft will talk about the improvements they have made to AD and Group Policy on their Windows 8 blog at some point, but in the meantime I thought this was worth posting...

 

Link: grouppolicy.biz/2011/10/whats-new-with-group-policy-in-windows-8/

 

The Windows Developer Preview version of Windows Server 8 has been on MSDN now for a while therefore I setup a Domain Controller and found some very interesting new Group Policy features lurking…

 

Group Policy Infrastructure Status

If you click on the domain name in GPMC you will notice there is a new tab called “Infra Status”. As the page says “The page shows the status of Active Directory and Sysvol (DFSR) replication for this domain as it relates to Group Policy”. This will obviously be a great troubleshooting tool for Group Policy settings that are not applying to the computers in your organisation due to AD replication issues.

 

http://i.imgur.com/s109C.png

 

Group Policy Update

If you right click on any OU in you AD you will see a new menu option called “Group Policy Update…”.

 

http://i.imgur.com/Wn3Lw.png

 

What is particularly interesting is the text “FORCE A GROUP POLICY UPDATE" meaning that you can now force the group policy update to all computers in a Organisations Unit. This would effectively mean that administrators can now make changes to their computers without having to wait the default 90 minutes to wait for group policy to refresh on a computer.

 

http://i.imgur.com/rCq1C.png

 

http://i.imgur.com/salaf.png

 

Seeing the task was scheduled I then took a look at the scheduled tasks on the computer being targeted and found that it had created two scheduled tasks to perform a gpupdate in the user and computer context.

 

http://i.imgur.com/TtPl9.png

Arthur

Arthur

Posted
  • Author
Posted
is amazing that this wasn't included in Windows 2000.

Better late than never! :) Mounting ISOs is another feature which shouldn't have taken more than a decade to implement.

  • 2 weeks later...
Michael

Michael

Posted
Posted

It looks a nice idea, however it is easy enough to reduce Group Policy refresh from the default 90 minutes to say 5 or 10 minutes with existing GPOs. You could accomplish this ever since Windows 2000 Server, so it's not going to be that useful to me! :)

 

What would be really good is to somehow see all machines which have had MSIs applied, similar to WSUS in a way. You can easily see via a pie chart which machines are up-to-date.

sted

sted

Posted
Posted
It looks a nice idea, however it is easy enough to reduce Group Policy refresh from the default 90 minutes to say 5 or 10 minutes with existing GPOs. You could accomplish this ever since Windows 2000 Server, so it's not going to be that useful to me! :)

 

What would be really good is to somehow see all machines which have had MSIs applied, similar to WSUS in a way. You can easily see via a pie chart which machines are up-to-date.

could wsus be changed to do software deploys as well wsuis win server update & install server

sted

sted

Posted
Posted
Probably, but it would be nice to have something official from Microsoft :)

that was what i was meaning could the make wsus 4 do that as they do seem to be moving away from msi/mst which ad does to msi/msp/xml which needs scripting

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing


×
×
  • Create New...