Administrative tool extensions : Facilitate authoring and modification of specific administrative settings that are related to extended functionality, such as the security-based settings specified in [MS-GPIPSEC]. The Administrative tool extensions that apply to policy targets are designated by the Extension list of a GPO. Each Administrative tool extension in the GPO Extension list is represented as a GUID that is associated with an administrative-side extension protocol, sometimes referred to as an administrative plug-in.
The plug-in resides on the computer that hosts the Administrative tool. To identify GPOs that the administrative-side extension can query to obtain the stored settings for that extension. To provide the message sequences for updating the administrative-side extension settings that are stored in the logical part of a GPO. To invoke a file access protocol to retrieve or store extension-related policy settings in the extension policy files on the Group Policy file share.
This is beneficial to relying on WSUS — because even if we have the update approved for installation, when the PC is first joined to the domain it has to check in with WSUS, and depending on our patching schedule, it could take several days until the CSE actually gets installed.
However, as usual I make no warranties of any kind, and if you choose to use this script in a production environment, you do so at your own risk. Your email address will not be published. Aimless Ramblings from a Blithering Lunatic.
User and computer objects that reside in these containers receive policy settings and preference items defined in the linked GPOs because they are within the scope of the GPO. Unlike policy settings, by default preference items are not removed when the hosting GPO becomes out of scope for the user or computer. If the Remove this item when it is no longer applied option is selected, it changes this behavior.
After selecting this option, the preference extension determines if the preference item should not apply to targeted users or computers out of scope. If the preference extension determines the preference item is out of scope, it removes the settings associated with the preference item. Selecting this option changes the action to Replace. During Group Policy application, the preference extension recreates deletes and creates the results of the preference item. When the preference item is out of scope for the user or computer, the results of the preference item are deleted, but not created.
Preference items can become out of scope by using item-level targeting or by higher-level Group Policy filters such as WMI and security group filters. The Remove this item when it is no longer applied option is not available when the preference item action is set to Delete. By default, the results of preference items are rewritten each time Group Policy refreshes. This ensures that the results of the preference items are consistent with what the administrator designated in the Group Policy object.
If the Apply once and do not reapply option is selected, it changes this behavior, so the preference extension applies the results of the preference item to the user or computer only once. This option is useful when you do not want the results of a preference item to reapply. Group Policy provides filters to control which policy settings and preference items apply to users and computers. Preferences provide an additional layer of filtering called targeting. Item-level targeting allows you to control if a preference item applies to a group of users or computers.
For more information, see Preference item-level targeting. In addition to enabling and disabling preference items within a Group Policy object GPO , you can individually enable and disable underlined settings or settings preceded by a circle within a preference item. A setting with a solid green underline or a green circle is enabled.
Sign in to vote. How I download this to configuration manger so I can advertise to XP clients. Pls advise Sony. Thursday, February 23, PM. Hi, You configure it under Site Management, site, Site Settings, Component Configuration and there you have the Software Update Point Component where you can select properties and change which products should sync, classification e.
Wednesday, April 4, AM. Thanks, I think I configured only security and critical updates for the sofware update points. Thanks Sony. Thanks Got it.
0コメント