July 12 Day 7 Blog

Day 7 blog July 12

We did 4 items today from the day 6 and day 7 list of activities
We were successful in all 4 of these items, however there were a few items that were very finicky but we were able to work through these items. Most of these setups were to follow a sequence of steps through the references we found on the web. We had to make very sure of out typing, especially spaces in our login script.

Mini exercise: Group Policy- hide desktop

Group Policy Management was installed
The second part is to create a group policy inside our John Sandie OU.

right clicking on the John Sandie container and adding the policy.

Create the group policy called NO Desktop John Sandie
right click on the group policy /choose "edit" which will open a list of options that you can assign to the group policy that you've just created.
Find and enable "Hide items on desktop".
Right click and ENFORCE the change.
Reboot the Windows 7 workstations and log in using the Student name and password and all icons have disappeared from the desktop.


Mini exercise: A third part application specopsgpupdate and remote shutdown feature
One of these free applications that is used widely is specopsgpudate.
Download the file and install the program specopsgpudate on the Windows Server 2008 machine from link Lyle gave us. This was a simple process of following the prompts.
This program is a shell extension that only shows up in the "Users and Computers" program when you right click on an object.
Find the name of one of the windows 7 computers that are in your OU in the "Users and Computers" program.
Right click on the computer and choose the "Specops gpupdate" option.
This will start another program where you have a variety of choices and one option is to choose the shutdown option.
Once you click on shutdown and confirm the selection, the workstation will shut down. We were able to shutdown one of our Workstations using this feature.

Disabling IE explorer securities in Server 2008
You have to click on the root folder in Server Manager.
Then you scroll down to the Security Information Section and click “Configure IE ESC”.
You can turn off IE ESC for Administrators and/or for users.






Mini exercise: Login scripts using group policy
login scripts and in particular how to map drive letters for an S drives . You will use this documentation to create a windows login script and place it in the "Netlogon" directory in Active Directory

http://www.petri.co.il/setting-up-logon-script-through-gpo-windows-server-2008.htm

start/AdministrativeTools/Group Policy Management
right click on Sandie-John / Create a GPO in this domain, and link it here/ select
Call the new gpo LOGIN SCRIPT Sandie John
Right-click the new GPO and select Edit.
In the Group Policy Object Editor window, expand User Configuration > Windows Settings > Scripts.
Double-click Logon in the right-hand pane.
In the Logon Properties window, click Show Files.
A window will open. The path will be a folder similar to the following:
Net use s: \\JSserver10\shared
Close the window.
Back in the Logon Properties window, click Add
In the Add a Script window, click Browse and you will see the logon script step #11. Whatever you do, DO NOT manually browse for the file, it should be in front of your eyes. If it's not there, check the previous steps for a mistake. Click Ok
Back in the Logon Properties window, see if the logon script is listed, and if it is, click Ok
Close the Group Policy Object Editor window.
Close the GPMC window.
Gpupdate
In active directory users / select John-Sandie
Users and Computers" program when you right click on an object.
Right click on the computer and choose the "Specops gpupdate" option
Testing the logon script
On one of the computers that is part of the domain, logoff the specific user account. Logon and test. When we log in as a teacher or student under computer we see the S drive for the js server as a shared drive.

Mini exercise: Folder redirection

Find the documentation online on how to implement folder redirection.
The first task is to set up each user that logs in to your server with a home directory that resides on the server.
You will then adjust the group policy so that all users will automatically be redirected to that home directory when they open up "My Documents" or "Documents".
The second task is to implement a shared start menu so that when a user clicks on the start button and goes to programs, the menu shortcut icons are retrieved from the file server.
The menu icons will be located in a separate share on the file server so you'll need to create a new share called, "StartMenu" where you will past the menu shortcut items.
Make sure you adjust the permissions correctly so all users are able to only read the items in the start menu and not write to the start menu.