| Author | Messages | |
AndrewMcHale
Posts:0
 | | 03/11/2009 2:01 PM |
| Hi all,
Sorry, but a real 'Group Policy 101' question here.
If the GPP action Create means "Create if it does not exist, otherwise
do nothing"Ώ] does this mean that any subsequent changes made to the
GPP setting will NOT be propagated if the item has already been created?
If that is true, then I assume this would be a reason to use the Update
action?
What would happen if I used the Create action to create an item, but
subsequently want to make a change to the GPP setting? Can I just change
the GPP action setting to Update, or do I need to delete and recreate
the item?
In my case I am thinking about deploying printers using the Create
action, as I have readΐ] this can reduce the entries in the event log,
but if I needed to change the IP of the printer for example, would I
have to remove the preference and recreate it, or could I just change
the action to Update and change the IP in the preference?
Thanks in advanced for the help
Andrew
Ώ] Alan Cuthbertson - GPP and Printers based on Security Group (2009) -
GPOGuy.com
ΐ]
http://claymoore.net/2009/02/04/deploying-tcpip-printers-with-group-poli
cy-preferences/
| | | |
| kcnychief
Posts:0
| | 03/11/2009 2:18 PM |
| I had the same question last week and the answer was very clear -
Create - Will create if doesn't exist, otherwise it will exit.
Update - Will create if doesn't exist, otherwise it will reapply (update)
Replace - Delete if does exist, otherwise will create
As far as removing the preference and re-creating it, I don't believe that
would have any impact besides no longer applying it. In your scenario, you
should be able to get by with using the Update type, which will create your
entry if it doesn't exist or update items such as the IP. Alternatively,
you could update your GPP to Replace when the change is made, which may be
cleaner.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Andrew McHale
Sent: Wednesday, March 11, 2009 1:56 PM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Group Policy Preference Actions
Hi all,
Sorry, but a real 'Group Policy 101' question here.
If the GPP action Create means "Create if it does not exist, otherwise do
nothing"Ώ] does this mean that any subsequent changes made to the GPP
setting will NOT be propagated if the item has already been created?
If that is true, then I assume this would be a reason to use the Update
action?
What would happen if I used the Create action to create an item, but
subsequently want to make a change to the GPP setting? Can I just change the
GPP action setting to Update, or do I need to delete and recreate the item?
In my case I am thinking about deploying printers using the Create action,
as I have readΐ] this can reduce the entries in the event log, but if I
needed to change the IP of the printer for example, would I have to remove
the preference and recreate it, or could I just change the action to Update
and change the IP in the preference?
Thanks in advanced for the help
Andrew
Ώ] Alan Cuthbertson - GPP and Printers based on Security Group (2009) -
GPOGuy.com
ΐ]
http://claymoore.net/2009/02/04/deploying-tcpip-printers-with-group-policy-p
references/
| | | |
| Syspro
Posts:0
| | 03/11/2009 6:12 PM |
| Hi,
Think carefully about REPLACE. Every time policies are applied the setting
will be deleted and recreated. This will then lose any settings that the
user may have applied to the object. I am not sure exactly what settings
will be lost, but potentially if the user modifies a printer setting (e.g.
set as default) this may be lost when using REPLACE.
I would stick with UPDATE. This would mean that if the user fiddles with
your IP Address settings, you will win. However if they change other
settings, they will remain.
CREATE is more appropriate when you are saying "I will set it up initially,
then the user can do what they like". You could later change it to UPDATE if
you want to change the IP Address, but it needs to stay as UPDATE until
every machine has run Group Policy Processing.
Note: There is also a setting "Apply Once and do not reapply" which may be
what you are looking for. If you use it with UPDATE, it will change
everyone's setting then leave them alone. If you subsequently change
something (such as the IP Address) it will once again reapply all your
settings, then leave them alone again.
Alan Cuthbertson
Policy Management Software (Now with ADMX and Preference support):-
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml>
&f=pol_summary.shtml
ADM Template Editor(Now with ADMX support):-
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml>
&f=adm_summary.shtml
Policy Log Reporter - including Preference logging(Free)
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml>
&f=policyreporter.shtml
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Derek Rose
Sent: Thursday, 12 March 2009 5:11 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Group Policy Preference Actions
I had the same question last week and the answer was very clear -
Create - Will create if doesn't exist, otherwise it will exit.
Update - Will create if doesn't exist, otherwise it will reapply (update)
Replace - Delete if does exist, otherwise will create
As far as removing the preference and re-creating it, I don't believe that
would have any impact besides no longer applying it. In your scenario, you
should be able to get by with using the Update type, which will create your
entry if it doesn't exist or update items such as the IP. Alternatively,
you could update your GPP to Replace when the change is made, which may be
cleaner.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Andrew McHale
Sent: Wednesday, March 11, 2009 1:56 PM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Group Policy Preference Actions
Hi all,
Sorry, but a real 'Group Policy 101' question here.
If the GPP action Create means "Create if it does not exist, otherwise do
nothing"Ώ] does this mean that any subsequent changes made to the GPP
setting will NOT be propagated if the item has already been created?
If that is true, then I assume this would be a reason to use the Update
action?
What would happen if I used the Create action to create an item, but
subsequently want to make a change to the GPP setting? Can I just change the
GPP action setting to Update, or do I need to delete and recreate the item?
In my case I am thinking about deploying printers using the Create action,
as I have readΐ] this can reduce the entries in the event log, but if I
needed to change the IP of the printer for example, would I have to remove
the preference and recreate it, or could I just change the action to Update
and change the IP in the preference?
Thanks in advanced for the help
Andrew
Ώ] Alan Cuthbertson - GPP and Printers based on Security Group (2009) -
GPOGuy.com
ΐ]
http://claymoore.net/2009/02/04/deploying-tcpip-printers-with-group-policy-p
references/
| | | |
| AndrewMcHale
Posts:0
| | 03/12/2009 4:57 AM |
| Hi Alan & Derek,
Thanks for the replies.
Using Update with Apply Once sounds like the way to go! Annoying (but
not surprising) that I didn't think of this myself.
Cheers muchly!
Andrew
From: Alan and Margaret Cuthbertson [mailto:xxxxxxxxxxxxxxxx]
Sent: 11 March 2009 22:07
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Group Policy Preference Actions
Hi,
Think carefully about REPLACE. Every time policies are applied the
setting will be deleted and recreated. This will then lose any settings
that the user may have applied to the object. I am not sure exactly what
settings will be lost, but potentially if the user modifies a printer
setting (e.g. set as default) this may be lost when using REPLACE.
I would stick with UPDATE. This would mean that if the user fiddles with
your IP Address settings, you will win. However if they change other
settings, they will remain.
CREATE is more appropriate when you are saying "I will set it up
initially, then the user can do what they like". You could later change
it to UPDATE if you want to change the IP Address, but it needs to stay
as UPDATE until every machine has run Group Policy Processing.
Note: There is also a setting "Apply Once and do not reapply" which may
be what you are looking for. If you use it with UPDATE, it will change
everyone's setting then leave them alone. If you subsequently change
something (such as the IP Address) it will once again reapply all your
settings, then leave them alone again.
Alan Cuthbertson
Policy Management Software (Now with ADMX and Preference support):-
http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml
ADM Template Editor(Now with ADMX support):-
http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml
Policy Log Reporter - including Preference logging(Free)
http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Derek Rose
Sent: Thursday, 12 March 2009 5:11 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Group Policy Preference Actions
I had the same question last week and the answer was very clear -
Create - Will create if doesn't exist, otherwise it will exit.
Update - Will create if doesn't exist, otherwise it will reapply
(update)
Replace - Delete if does exist, otherwise will create
As far as removing the preference and re-creating it, I don't believe
that would have any impact besides no longer applying it. In your
scenario, you should be able to get by with using the Update type, which
will create your entry if it doesn't exist or update items such as the
IP. Alternatively, you could update your GPP to Replace when the change
is made, which may be cleaner.
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Andrew McHale
Sent: Wednesday, March 11, 2009 1:56 PM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Group Policy Preference Actions
Hi all,
Sorry, but a real 'Group Policy 101' question here.
If the GPP action Create means "Create if it does not exist, otherwise
do nothing"Ώ] does this mean that any subsequent changes made to the
GPP setting will NOT be propagated if the item has already been created?
If that is true, then I assume this would be a reason to use the Update
action?
What would happen if I used the Create action to create an item, but
subsequently want to make a change to the GPP setting? Can I just change
the GPP action setting to Update, or do I need to delete and recreate
the item?
In my case I am thinking about deploying printers using the Create
action, as I have readΐ] this can reduce the entries in the event log,
but if I needed to change the IP of the printer for example, would I
have to remove the preference and recreate it, or could I just change
the action to Update and change the IP in the preference?
Thanks in advanced for the help
Andrew
Ώ] Alan Cuthbertson - GPP and Printers based on Security Group (2009) -
GPOGuy.com
ΐ]
http://claymoore.net/2009/02/04/deploying-tcpip-printers-with-group-poli
cy-preferences/
| | | |
|
|