What Is New in Group Policy

Windows Server 2008 and Windows Vista introduced some significant enhancements to both the management of Group Policy and the items available for configuration using Group Policy. Let us look at some of these management enhancements first and then dive into the policy improvements related to security configuration management.

Group Policy Service

The first change to the Group Policy infrastructure was mostly invisible to administrators. Prior to Windows Vista and Windows Server 2008, the Group Policy engine ran within the trusted Winlogon process in Windows. This made a certain amount of sense at the time but also presented some challenges. Primarily, Microsoft or third-party Client Side Extensions (CSEs) also ran within ...

Get Windows Server® 2008 Security Resource Kit now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.