´ë·«°ú ´º½º ´ç½ÅÀÇ Á¦ÀÏ Á¤º¸ Ãâó â Àü¸Á, ºñ½ºÅ¸ ±â°è¼³ºñ ±×¸®°í Àü¸Á ÀÎÅͳݿ¡

ºñ½ºÅ¸ ±â»ç Á¤»ó 50 ºñ½ºÅ¸ ¿µ»ó ¿¬¾àÇÑ ºñ½ºÅ¸ ºñ½ºÅ¸ µµ¿ò

Jeremy Moskowitz

´ç½ÅÀº ÇöÀç ±â»ç¸¦¿¡¼­ ã¾Æº¸°í ÀÖ´Ù MS Windows ºñ½ºÅ¸ ȣȯ¼º ¼ÒÇÁÆ®¿þ¾î Á¾·ù ÀÏÄ¡ Jeremy Moskowitz.

½ºÅ¸Æ®¾÷ ½ºÅ©¸³Æ®¸¦ »ç¿ëÇÏ´Â GPP CSEs¸¦ ¼³Ä¡ÇÏ´Â ¹æ¹ý

´ç½ÅÀº ÀÖÀ» ¶§ ±×·ì Á¤Ã¥ ƯÇý (GPP) Ŭ¶óÀ̾ðÆ®Ãø ¿¬Àå (CSE) ±×µéÀÌ¿¡ (¾ÆÁ÷) ´Ù´Â °ÍÀ» ´ç½ÅÀ̶ó°í ´Ù¿î·ÎµåÇÏ´Â ÁÖÀÇÇÒ °ÍÀÌ´Ù .MSI üÀç - ÀÌ·¸°Ô¸¦ »ç¿ëÇÏ´Â ±×·ì Á¤Ã¥ ¼ÒÇÁÆ®¿þ¾î ¼³Ä¡ (GPSI) °¡´ÉÇÏÁö ¾Ê´Ù. ºÎ¶ûÀÚ, ±Ç¸®!?

¿ì¸®´Â ÀÖ´Ù .EXE Windows XP /2003¸¦ À§ÇÑ ÆÄÀÏ .MSU â ºñ½ºÅ¸¸¦ À§ÇÑ ÆÄÀÏ¡¦ ±×·¯³ª Àú°ÍÀº ¿ì¸®°¡ ´ë·« »ý°¢ÇÒ Çʿ䰡 ÀÖ´Â À¯ÀÏÇÑ °ÍÀÌ ¾Æ´Ï´Ù. ¿ì¸®°¡ OS¸¦ ¾Ë Çʿ䰡 ÀÖ´Â ³×Æ®¿öÅ©¿¡ Ŭ¶óÀÌ¾ðÆ®¿¡°Ô "Àü¿¡" ÀÌ °ÍÀ» ¹èÄ¡Çϱ⠹öÀü (XP/2003/Vista), OS °ÇÃà¼ú (32 64 Á¶±Ý) ¼­ºñ½º ÆÑ ¼öÁØ¹× ±×·ì Á¤Ã¥ ƯÇý ÀüÁ¦Á¶°Ç (WmlLite - http://support.microsoft.com/kb/914783/en-us) ¼³Ä¡µÈ´Ù.

ÀÌ ¸Å¿ì ½¬¿î ÀüºÎ ³ª´Â ½Ã۱â À§ÇÏ¿©´Â âÁ¶Çß´Ù "¹ÎÁÖ´ç¿ø"¸¦ ¿øº» ½ºÅ¸Æ®¾÷ ½ºÅ©¸³Æ®¸¦ »ç¿ëÇÏ¿© GPP CSEs ¹èÄ¡¸¦ À§ÇØ - ¶Ç´Â ¼öµ¿ ¹ß»ç (admin ¹®¸Æ¿¡¼­). ³ªÀÇ ÁÁÀº Ä£±¸ Jeremy Moskowitz À̰ÍÀ» ÇÏ´Â Àú¸¦ ¿ä±¸ÇØ - ÀÌ·¸°Ô, ³ªÁß¿¡ 2 ½Ã°£ "¹ÎÁÖ´ç¿ø" - ¶Ç´Â"beta"- ¿øº»Àº °øÁß ÀÌ´Ù (¾Æ·¡¿¡ ´Ù¿î·Îµå)¡¦

ÁÖ: ³ª´Â ¸ðµç ´ëº» ¾ÆÁ÷ ½ÃÇèÇÒ ¼ö ÀÖÁö ¾Ê´Ù, ¾Æ´Ï¶ó °è¼Ó I¿¡¼­ *»ý°¢ÇϽʽÿÀ* ±×µéÀº ÀüºÎ Áö±ÝÂëÀº ÀÌ¹Ì ¸Å¿ì Àß µ¤´Â´Ù. º¸°í µÚ ´ç½ÅÀÌ ¾Æ¹« ¹®Á¦³ª - ¹«¾ùÀ̵ç ã¾Æ³»´Â °æ¿ì¿¡´Â ÀÇ°ß È¯¿µ¹Þ´Ù!

...
´©¸£½Ê½Ã¿À "Àд °è¼ÓµÇ À§ÇÏ¿© ½ºÅ¸Æ®¾÷ ½ºÅ©¸³Æ®¸¦ »ç¿ëÇÏ¿© GPP CSEs¸¦" ¼³Ä¡ÇÏ´Â ¹æ¹ý

Jakob H.¿¡ ÀÇÇØ ¾²´Â. À§¿¡ ÇÏÀ̵¨º£¸£Å© 2008³â 2¿ù 29 ÄÚ¸àÆ® ¾øÀ½.
±â»ç¸¦ ´õ À§¿¡ ÀÐÀ¸½Ê½Ã¿À ±×·ì Á¤Ã¥ ¿¬Àå ±×¸®°í gp ƯÇý ±×¸®°í ±×·ì Á¤Ã¥ ƯÇý ±×¸®°í otherSoftware ±×¸®°í Ŭ¶óÀ̾ðÆ®Ãø ¿¬Àå ±×¸®°í Jeremy Moskowitz ±×¸®°í ´ëº»À» ¾²±â ±×¸®°í ¸¶ÀÌÅ©·Î¼ÒÇÁÆ® ±×¸®°í Windows XP ±×¸®°í ´Ù¿î·Îµå ±×¸®°í â ¼­¹ö 2003³â ±×¸®°í ±×·ì Á¤Ã¥ ±×¸®°í â ºñ½ºÅ¸.

WMI ¿©°ú±â °æ¿¬ - ´ç½ÅÀº shining ±â°©¿¡ ÀÖ´Â ±â»çÀΰ¡?

ȯ¿µ¿¡ "½Å¼ºÇÑ 2 ¹ÙÅÁ È­¸é WMI ¿©°ú±â¸¦ À§ÇÑ Å½±¸", À̰ÍÀº ´ç½ÅÀÌ "¼ö ÀÖ´ø ¹«½¼À»À» À§ÇÑ ¼¼°èÀûÀÎ ¼ö»ö ºÎ¸¦ÀÌ´Ù¿ÏÀüÇÑ 2 ¹ÙÅÁ È­¸é WMI ¿©°ú±â ". A WMI filter which, by using WMI Query Language (WQL), should be able to spot DESKTOP computers only. It should be a general query - meaning it should be possible to use the filter in most Active Directory environments around the globe for Group Policy filtering.

So, what is a desktop really? Well, actually in this case we'll say it's the opposite of a laptop. Hmm, then what is a laptop? Easy enough: a computer with a battery! We've got the WMI filter for finding laptops already:

Select * from Win32_Battery  - don't you just love the simplicity in this query?

This filter will make a computer with a battery respond back with "TRUE" (because the WMI class instance is present), meaning a GPO with this filter will apply to computers with batteries. Simple right? And you might think it's easy to just "turn it around" to find desktops, like:

Select * From Win32_Battery Where Availability != 2
  or
Select

...
Click to continue reading "The WMI Filter Contest - are you the knight in shining armor?"

Written by Jakob H. Heidelberg on February 13th, 2008 with no comments.
Read more articles on Jeremy Moskowitz and otherSoftware and MVP and technet and Group Policy and Microsoft.

Using Group Policy to Secure and Manage UNIX, Linux and Mac Systems

This new webinar from www.centrify.com has been announced lately - featuring my good pal Jeremy Moskowitz - it¡¯s gonna be awesome!

Check out the content and sign up for a great show - 100% guarantee:

 

Five Top Benefits of Using Windows Group Policy to Secure and Manage UNIX, Linux and Mac Systems

    Date:           February 21, 2008    
    Time:          2 p.m. Eastern US (11 a.m. Pacific)    
    Duration:     1 hour  

 
In this live webinar, Linux, UNIX and Mac admins will get a concise overview of how Group Policy works from Jeremy Moskowitz, author of authoritative works on both Windows Group Policy and Windows/Linux integration. Centrify¡¯s David McNeely will then explain the workings of the Group Policy engine that is seamlessly built into DirectControl and the unique benefits of using it for non-Windows policy enforcement. He¡¯ll also demonstrate using Windows Group Policy to lock down user and security settings on a Mac desktop system.

Register now (*CLICK HERE*) and we¡¯ll send you a free copy of our complementary white paper on extending Windows Group Policy to Linux, UNIX and Mac.

 

¡¦

Click to continue reading "Using Group Policy to Secure and Manage UNIX, Linux and Mac Systems"

Written by Jakob H. Heidelberg on February 5th, 2008 with no comments.
Read more articles on otherSoftware and Jeremy Moskowitz and Group Policy and Linux and Mac.

Jeremy Moskowitz in RunAs Radio

Richard Campbell & Greg Hughes from RunAs Radio talks to my good friend Jeremy Moskowitz about Group Policy - who would have guessed, right :-)

Check it out here: http://www.runasradio.com/default.aspx?showNum=32

Written by Jakob H. Heidelberg on November 20th, 2007 with no comments.
Read more articles on runas and radio and otherSoftware and Jeremy Moskowitz and Group Policy.

Moskowitz videos

Hi,

Microsoft MVP, Jeremy Moskowitz, has 2 video interviews out there¡¦ Check them out:

Part 1 & Part 2

_

Written by Jakob H. Heidelberg on October 1st, 2007 with no comments.
Read more articles on Jeremy Moskowitz and MVP and Videos.