1.2. Files
With the Files preference extension, you can copy, modify
the attributes of, replace, or delete files. The extension
supports wildcards in file paths and environment
variables.
Before configuring a file preference item, review the
behavior of each type of action and setting shown in Table 3.
To create a new file preference item, follow these
steps:
Start Group Policy Management from the Administrative
Tools menu.
Right-click the GPO that will contain the new preference
item, and then click Edit.
In the console tree under Computer Configuration or User
Configuration, expand the Preferences folder, and then expand
the Windows Settings folder.
Right-click Files, point to New, and select File.
In the New File Properties dialog box, select one of the
following actions from the drop-down list:
Create Copies a file
or multiple files from a source to a destination, and then
configures the file attributes for computers or
users.
Delete Removes a file
or multiple files.
Replace Overwrites
files at the destination location with replacement files.
If the file does not exist at the destination, the Replace
action copies the file from the source location to the
destination.
Update Modifies
attributes of an existing file.
Enter the file settings, which are described in Table 3.
Click the Common tab, and select the options you want.
Click OK. The new preference item appears in the details
pane.
Table 3. File settings
| SETTING | ACTION | DESCRIPTION |
|---|
| Source File(s) | Create, Replace, or Update | Enter the location from which to copy the
source file. The field can include variables. You can use
a local or mapped drive or a fully qualified UNC
path. |
| Destination File | Create, Replace, or Update
and the Source File(s) field includes
wildcards | Enter the location to which to copy
files or the location of the files to be
changed. You can use a local or mapped drive (from the
perspective of the client) or a fully qualified UNC
path. |
| Delete File(s) | Delete | Type the path to the file or files from the
perspective of the client. The field can include
wildcards. |
| Suppress Errors On Individual File
Actions | Replace, Update, or Delete | Select this check box to allow multiple files
to transfer during the replace, delete, or update
operation even if one or more files fail to
transfer. |
| Attributes | Create, Replace, or Update | Select attributes for the file or files being
transferred. If necessary to complete an operation, the
Read Only attribute will be reset. |
2. Configuring Common Options
All Group Policy preference items have a Common tab, and
many items share common options, including the following:
Stop Processing Items In This
Extension If An Error Occurs More than one item can be
configured in each extension. If this option is selected, a
failed preference item will stop the remaining preference items
from processing.
Note:
Preference items are processed from the bottom of the
list, moving toward the top. If you select this option, items
processed before the failing item will still be processed
successfully. This option only stops preference items that
follow the failed item.
Run In Logged-On User’s Security
Context (User Policy Option) By default, user preferences are processed using
the security context of the SYSTEM account. Select this option
and the preference items are processed in the security context
of the logged-on user. This lets the preference extension access
resources as the user and not as the computer. This can make a
difference when using mapped drives and other network
resources.
Remove This Item When It Is No
Longer Applied By default, Group Policy doesn’t remove
preferences when the GPO is removed from the user or computer.
Select this option and the preference item is removed when the
GPO is removed.
Apply Once And Do Not
Reapply The results of preference items are rewritten
each time Group Policy refreshes, which is every 90 minutes by
default. Select this option and preferences will apply once for
the computer, no matter how many users share the computer.
Select this option in User Configuration and the item will be
applied once on each computer the user logs in to.
Item-Level Targeting You
can use item-level targeting to apply preference items to
individual users and computers. You can include multiple
preference items, each tailored for selected users or computers
and each targeted to apply settings only to the relevant users
or computers.
3. Using Group Policy Preferences for Control Panel
In addition to the Windows category, you can make preference
settings under Control Panel.
3.1. Devices
Use the Devices preference item to centralize the enabling
or disabling of specific types of hardware for users or computers.
You can configure an entire class of devices, such as Ports (COM
& LPT), or narrow the selection to a particular type of
device, such as Communications Port (COM2). To configure a Device
preference item, follow these steps:
Start the Group Policy Management Console.
Right-click the GPO that will contain the new preference
item and then click Edit.
In the console tree under Computer Configuration or User
Configuration, expand the Preferences folder, and then expand
the Control Panel Settings folder.
Right-click Devices, point to New, and select
Device.
In the New Device Properties dialog box, select Use This
Device (Enable) or Do Not Use This Device (Disable) from the
Action drop-down list.
Enter the Device settings. (See Table 4 for descriptions.)
Click the Common tab, and select the desired options.
Click OK. The new preference item appears in the details
pane.
Table 4. Device settings
| SETTING | ACTION | DESCRIPTION |
|---|
| Device Class | Enable or Disable | Click the Browse button to select the enabled
or disabled device class plus the device type, if
required. |
| Device Type | Enable or Disable | If a device type is selected, it will appear
in this field. |
