Microsoft QLF-00195 manual Group Policy Improvements

Windows 7 for IT Pros:

Reduce Costs by Streamlining PC Management

Keep PCs Running Smoothly

•PowerShell Remoting. Windows PowerShell uses the standard management protocol WS

Management (WS-MAN) to invoke cmdlets on client PCs. It supports two types of remoting: fan-out remoting, which provides one-to-many remoting capabilities so you can run manage- ment scripts across multiple PCs from a single console, and one-to-one interactive remoting, for remotely troubleshooting a specific computer.

•Script Internationalization. With Windows 7, you can easily localize messages and content for

Windows PowerShell scripts using the .NET localization model. This can be especially useful for companies in which employees work in several different languages.

•PowerShell Restricted Shell. You can use the PowerShell Restricted Shell to create a custom shell in which only certain commands and command parameters are available to system admin- istrators. You can also set access permissions—or active control lists (ACLs) on custom scripts, so that system administrators can access only scripts to which they have been granted rights. This increases the ability to drive automation throughout an organization by enabling IT profession- als to delegate only certain tasks.

•Automating Group Policy. With the Group Policy Management Console, which is available as a separate download, you can use scripting to manage Group Policy Objects (GPOs) and create and edit registry-based Group Policy settings in Windows 7. In this way, you can save time and avoid errors when managing multiple Group Policies.

•Richer Logon Scripts. Use Windows PowerShell to create simple yet powerful logon, logoff, startup, and shutdown scripts that are executed through Group Policy. Windows PowerShell offers a more advanced way to configure PCs than by using simple batch files.

Group Policy Improvements

Now you can flexibly manage PCs that are disconnected from the corporate network, limit which applica- tions people can run, require removable storage devices to be encrypted, and audit user activity more granularly. For example, organizations that use DirectAccess to provide users with seamless remote access to corporate resources using an Internet connection also can manage remote PCs more effectively. Windows 7 also provides more comprehensive Group Policy settings so you can better configure and manage user PCs. There are additional settings for security and data protection, and you can manage new Group Policy scenarios using BitLocker To Go, more granular auditing, and AppLocker. In addition, an improved adminis- trative experience for Group Policy helps you take advantage of predefined best practices, further automate activities, and use Group Policy Preferences to extend the range of managed settings.

110 111