Five Key Group Policy Enhancements in Windows Server 2019

The beta version of Windows Server 2019 includes more than 4,560 new Group Policies, as well as improvements to the handling of the Group Policy infrastructure and the time-honored Group Policy Management Console.

It’s important to consider the following five innovations in a compatibility test to understand how the Windows 8 client and the new server work together.

Group Policy Update Option

Administrators can now graphically select an organizational unit to create a group policyto renew. Previously, using refresh command-line statements such as gpupdate / force required each machine to be updated one at a time. This allows changes in the network to be controlled directly from the console, and there are no longer waiting times until refresh takes effect in the entire network. However, this possibility is limited to computers that are recorded in organizational units. The refresh starts a download of both the user and computer portions of Group Policy Objects (GPOs) for a specified destination. This option creates two tasks on each computer in the selected OU. To do this, the domain controller must have the authorization to create tasks on these computers. Therefore, the firewall of each system must be configured accordingly.

Status Report of the Group Policy Infrastructure

Within the Group Policy Management Console there is a new “Infra Status.” Tab, which contains information about the status of the Active Directory as well as about replicating with Sysvol for a domain in relation to the Group Policy. This means that the sysvol status no longer needs to be looked up on every single server. Because replication of Active Directory has a key role to correctly apply Group Policy to a domain, it now provides a very useful tool for error prevention.

Five Key Group Policy Enhancements in Windows Server 2019

Management of the “Setting Sync” function with Group Policy

In the Windows 10 family, it is possible for users with a Windows Live ID to synchronize their documents and settings cloud-based, similar to Apple’s iCloud service. By entering their ID, they can instantly get their settings and files on different devices. Of course, this option makes administrators in companies uneasy. Windows Server 2019 offers seven new Group Policies to control this feature. They can be found under Computer Configuration> Administrative Templates> Windows Components> Settings Sync.

New Policies for Internet Explorer

Now it is possible to manage policy settings for Internet Explorer 11 directly from the Windows Server 2019 Group Policy Management Console. New IE features include turning off the password display in Windows 10 and IE 10 in Enhanced Protected Mode (requires Internet Explorer to run in 64-bit mode), protecting ActiveX Controls in Enhanced Protected Mode from less secure environments, and powering off the Windows 8 function “Delete Browsing History on Settings”.

Add a Comment

Your email address will not be published. Required fields are marked *