1
00:00:03,060 --> 00:00:03,590
Overview.

2
00:00:03,600 --> 00:00:08,700
Now I'm going to dig into preferences a little bit and kind of explore what I just talked about.

3
00:00:09,670 --> 00:00:14,830
So here I am in a GPO and I've got the computer configuration preferences area.

4
00:00:15,780 --> 00:00:21,150
Expanded and I'm going to go in under windows setting and just look at environment variables.

5
00:00:22,140 --> 00:00:27,780
So I can go ahead and create a new preference for environment variables, and I can choose it to be

6
00:00:27,780 --> 00:00:30,450
either user variable or system variable.

7
00:00:31,450 --> 00:00:33,970
I can just come up with a variable name.

8
00:00:34,920 --> 00:00:39,710
Let's just call it temp or actually let's do something a little bit more meaningful.

9
00:00:39,720 --> 00:00:41,250
Let's just call it system.

10
00:00:42,120 --> 00:00:46,680
And I'm not going to say that it's a path variable because it's its own variable.

11
00:00:46,800 --> 00:00:50,670
And then I'm going to give it a value and I'm going to just say GPP.

12
00:00:51,610 --> 00:00:54,130
Now again, notice the action option.

13
00:00:54,160 --> 00:00:57,220
I can choose based on how I want this option to behave.

14
00:00:57,340 --> 00:00:58,030
I can choose.

15
00:00:58,030 --> 00:00:59,470
Update, create, replace.

16
00:01:00,440 --> 00:01:06,140
Typically I will use update to set a new preference unless and specifically trying to accomplish a goal

17
00:01:06,140 --> 00:01:10,670
like either deleting it or having it be replaced so that it doesn't tattoo the system.

18
00:01:11,610 --> 00:01:15,240
So I'm going to go ahead and keep it at the update default.

19
00:01:16,240 --> 00:01:22,270
Now let's go to the common tab and I'll show you how we can do basically item level targeting and some

20
00:01:22,270 --> 00:01:24,130
of the other options that are available.

21
00:01:25,140 --> 00:01:28,140
So let's go ahead and run through some of these options.

22
00:01:29,110 --> 00:01:31,720
The start processing items in this extension.

23
00:01:31,720 --> 00:01:36,700
If this error occurs, option is simply a way of telling it that you want all of these settings in this

24
00:01:36,700 --> 00:01:39,700
particular extension to run or none of them to run.

25
00:01:40,630 --> 00:01:46,510
The remove this item when it no longer applied actually changes the mode from update to replace.

26
00:01:47,510 --> 00:01:50,700
So this is sort of telling it to behave like replace mode does.

27
00:01:50,720 --> 00:01:54,920
And because you're doing that, then it's actually forcing it into replace mode.

28
00:01:55,860 --> 00:02:01,050
So only check this option if you really want replace to be the action that you decide on.

29
00:02:01,990 --> 00:02:04,560
Apply once and do not reapply.

30
00:02:05,490 --> 00:02:11,280
This obviously has an impact on policy on actions like update or replace, which are designed to keep

31
00:02:11,280 --> 00:02:12,900
reapplying if they need to.

32
00:02:13,800 --> 00:02:18,900
This says only apply just once and never again for this particular computer or user.

33
00:02:19,900 --> 00:02:24,400
So what you end up doing here is having it be kind of like a true preference where it sets it for the

34
00:02:24,400 --> 00:02:28,360
user, but then the user can go in and change it subsequently.

35
00:02:29,310 --> 00:02:29,870
Okay.

36
00:02:29,880 --> 00:02:33,240
Now let's look at what item level targeting looks like.

37
00:02:34,200 --> 00:02:39,960
So I'm going to go in here and click item level targeting and then bring up the item level targeting.

38
00:02:39,960 --> 00:02:45,270
Ed And you'll see here that I have lots of options for different filters that I can use and let's just

39
00:02:45,270 --> 00:02:46,200
pick a couple of them.

40
00:02:47,180 --> 00:02:48,740
So battery present.

41
00:02:49,800 --> 00:02:55,110
I want to say if the battery is present, then I want this policy or preference setting to apply so

42
00:02:55,110 --> 00:02:59,610
that, you know, might be a good test for is it a laptop, for example?

43
00:03:00,540 --> 00:03:02,760
Another one might be disk space.

44
00:03:03,760 --> 00:03:09,120
So here you see if battery is present and free disk space is greater than or equal to 80 gig.

45
00:03:09,130 --> 00:03:14,500
And I can change that value to be something other than 80 on the system drive letter or a specific drive

46
00:03:14,500 --> 00:03:14,920
letter.

47
00:03:15,930 --> 00:03:20,790
System drive letter being the drive letter that the operating system is installed on.

48
00:03:21,730 --> 00:03:24,810
And you'll see here that it put in and in front of this condition.

49
00:03:24,820 --> 00:03:31,090
So I could actually right click it and say item options and I could say or so I can change this from

50
00:03:31,090 --> 00:03:32,110
an end to an or.

51
00:03:33,030 --> 00:03:39,120
And I can say if a battery is present or disk space is greater than or free disk space is greater than

52
00:03:39,120 --> 00:03:40,700
or equal to 80 gigabytes.

53
00:03:41,700 --> 00:03:44,070
So I can easily change these options.

54
00:03:45,070 --> 00:03:47,530
I can actually add nesting to the options.

55
00:03:48,550 --> 00:03:50,640
So I can say add a collection.

56
00:03:50,650 --> 00:03:53,830
And inside the collection I can add a targeting item.

57
00:03:54,760 --> 00:04:00,190
So I can say an operating system is Windows eight or Windows eight professional.

58
00:04:01,130 --> 00:04:07,520
So you'll see here that I've got a battery is present or free disk is greater than 80 gig and this collection

59
00:04:07,520 --> 00:04:08,150
is true.

60
00:04:09,060 --> 00:04:14,670
And what this means is all of the item level targeting in the collection evaluates to true.

61
00:04:15,640 --> 00:04:18,970
So I've got an operating system test in there.

62
00:04:20,000 --> 00:04:21,650
I could add a domain test.

63
00:04:21,650 --> 00:04:24,020
Is the domain equal to my domain here?

64
00:04:25,010 --> 00:04:26,810
So are two tests scuttled?

65
00:04:27,050 --> 00:04:29,270
Is the computer account in the domain?

66
00:04:30,230 --> 00:04:35,360
So what you've seen is I've created this kind of complex, conditional item level target where all of

67
00:04:35,360 --> 00:04:39,860
these things have to evaluate to true in order for this preference setting to apply.

68
00:04:40,740 --> 00:04:46,050
And again, remember, this is just on a single preference item that I defined right here.

69
00:04:47,060 --> 00:04:50,690
So I can come in and add a second environment variable in here.

70
00:04:50,690 --> 00:04:56,210
And, you know, I could call a test and give it a value and have its own set of item level targets

71
00:04:56,210 --> 00:04:58,340
that are completely different from the other one.

72
00:04:58,520 --> 00:05:01,040
And each of these would be evaluated in turn.

73
00:05:01,990 --> 00:05:05,620
I could say, is this in the marketing or you, for example?

74
00:05:06,600 --> 00:05:10,830
If the computer is in the marketing or you then apply this policy.

75
00:05:11,780 --> 00:05:17,570
And now I've got these different preference items within a single GPO, each having its own set of item

76
00:05:17,570 --> 00:05:18,460
level targets.

77
00:05:19,410 --> 00:05:20,810
And I can reorder them.

78
00:05:20,850 --> 00:05:24,750
So if this one, this test one needs to be evaluated first.

79
00:05:24,750 --> 00:05:29,040
I can move it up in the order or I can also disable a particular setting.

80
00:05:29,970 --> 00:05:36,060
So if I want to temporarily disable this particular environment variable, I can click here and you'll

81
00:05:36,060 --> 00:05:38,820
notice here that it says disabled directly.

82
00:05:39,730 --> 00:05:45,700
And that option, even though it's still in the GPO, even though the GPO is still active because it's

83
00:05:45,700 --> 00:05:50,230
disabled, it's not going to process and I can go back and enable it if I want.

84
00:05:51,220 --> 00:05:56,080
The other thing I can do is I can grab this preference item and I can drag it to my desktop.

85
00:05:57,000 --> 00:05:58,470
And what does it do?

86
00:05:59,380 --> 00:06:03,250
It creates a file on the desktop called Test XML.

87
00:06:04,230 --> 00:06:09,540
And this is just a file containing the actual settings within this particular preference item.

88
00:06:10,480 --> 00:06:16,750
You'll see here, it's an XML document that contains all the options that I specified for this environment

89
00:06:16,750 --> 00:06:17,440
variable.

90
00:06:18,450 --> 00:06:24,300
So let's say, for example, I was in a different GPO and I didn't have that test preference.

91
00:06:25,240 --> 00:06:27,370
I just deleted it from this one.

92
00:06:28,340 --> 00:06:33,950
So what I can do is then now that I've taken this item up here and put it on my desktop, I can right

93
00:06:33,950 --> 00:06:38,480
click and copy it, come back into the group policy object and click paste.

94
00:06:39,450 --> 00:06:42,420
And it will ask me if I want to confirm the paste.

95
00:06:43,380 --> 00:06:44,490
And here we go.

96
00:06:44,520 --> 00:06:49,410
We've just added that environment variable that had been deleted back into this GPO.

97
00:06:50,300 --> 00:06:55,640
And I could also, you know, take this XML file and add it to a different GPO.

98
00:06:56,540 --> 00:07:02,390
It's sort of a really quick and dirty way of getting settings out of group policy preferences and into

99
00:07:02,390 --> 00:07:03,560
other GPOs.

100
00:07:04,480 --> 00:07:06,700
And I can do this on more than one.

101
00:07:07,690 --> 00:07:09,670
I can do it on two or more.

102
00:07:10,640 --> 00:07:13,610
So it doesn't really matter how many I do it on.

103
00:07:14,560 --> 00:07:18,280
I can follow this and or which preference area that I use.

104
00:07:19,310 --> 00:07:20,930
I can follow this approach.

105
00:07:21,110 --> 00:07:23,780
So lots of cool features within preferences.

106
00:07:24,770 --> 00:07:29,810
You'll also remember that when I was in Internet Options, let me go down to Internet options under

107
00:07:29,810 --> 00:07:31,190
control panel settings.

108
00:07:31,370 --> 00:07:35,990
There was this notion of green, red and green underline and red underline.

109
00:07:35,990 --> 00:07:42,890
And I talked about the F keys, F5, f6, F f7 and F eight, which let me modify the behavior of these

110
00:07:42,890 --> 00:07:46,460
settings to tell it which of the settings I want to actually apply.

111
00:07:47,390 --> 00:07:51,860
So there's a few tricks within group policy preferences that are handy to know.