Module 6: Implementing Group Policy. Overview Implementing Group Policy Objects Implementing GPOs in...
-
Upload
berenice-clarke -
Category
Documents
-
view
236 -
download
1
Transcript of Module 6: Implementing Group Policy. Overview Implementing Group Policy Objects Implementing GPOs in...
Module 6: Implementing Group Policy
Overview
Implementing Group Policy Objects
Implementing GPOs in a Domain
Managing the Deployment of Group Policy
Lesson: Implementing Group Policy Objects
What Is Group Policy?
Processing Group Policy Objects
What Are User and Computer Configuration Settings?
Local Computer Group Policy
Practice: Set Local Computer Group Policy
What Is Group Policy?
Processing Group Policy Objects
Group Policies are processed in the following order:
Local computer Group Policy
Group Policy objects linked to the site
Group Policy objects linked to the domain
Group Policy objects linked to the OU
Group Policy settings for users control: Software settings
Windows settings
Security settings
Desktop settings
Group Policy settings for computers control: Software settings
Windows settings
Security settings
Operating system
What Are User and Computer Configuration Settings?
Local Computer Group Policy
Local Group Policy Snap-in
Practice: Set Local Computer Group Policy
In this practice, you will:
Create a custom MMC and add the Group Policy snap-in for the local computer
Configure a Group Policy setting to remove the user name from the Start menu
Configure a Group Policy setting to prevent Windows Messenger from automatically running at logon
Lesson: Implementing GPOs in a Domain
Tools Used to Manage GPOs
What Is a GPO Link?
How Group Policy Settings Are Inherited in Active Directory
Backup, Restore, and Import GPOs
Practice: Implementing GPOs in a Domain
Tools Used to Manage GPOs
Default Group Policy tools
Active Directory Users and Computers Active Directory Sites and Services Local Group Policy Custom Management Console
Add-in tools
Group Policy Management Console (GPMC)
What Is a GPO Link?
Site
Domain
OUDomain GPO
Organizational Unit GPO
Organizational Unit GPO
Site GPO
OUOU
OU
OU
How Group Policy Settings Are Inherited in Active Directory
User orComputerAccounts
Domain
OU
OU
OU
OUGPO 1
OUGPO 2
OUGPO 3
Back Up, Restore, and Import GPOs
The GPMC allows you to
Back up GPOs
Restore GPOs
Import settings from backed-up GPOs
Practice: Implementing GPOs in a Domain
In this practice, you will:
Install the Group Policy Management Console on DEN-CL1
Create an unlinked GPO
Create a linked GPO
Back up and restore a GPO
Lesson: Managing the Deployment of Group Policy
Attributes of a GPO Link
Blocking the Inheritance of a GPO
What Happens When GPOs Conflict
Filtering the Deployment of a GPO
Discussion: Modifying Group Policy Inheritance
Practice: Managing the Deployment of Group Policy
Attributes of a GPO Link
Enforced
Take precedence over other GPO settings
Link Enabled or Disabled
Links can be disabled for troubleshooting
Deleted
Links can be deleted without deleting the GPO
Multiple Links
When there are multiple GPOs linked to a container there is an order of precedence
Blocking the Inheritance of a GPO
Sales
Production
Domain
No GPO settings apply
No GPO settings apply
GPOs
What Happens When GPOs Conflict
How conflicts are resolved:
When Group Policy settings in the Active Directory hierarchy conflict, the settings for the child container GPO apply
Filtering the Deployment of a GPO
Sales
Production
Domain
Mengph
Kimyo
GroupApply Group Policy
Apply Group Policy
Deny
Read and Apply Group Policy
Read and Apply Group Policy
Allow
GPO
Discussion: Modifying Group Policy Inheritance
How do you set up your GPOs?How do you set up your GPOs?
Payroll
Sales
Contoso.msft
Training
RequirementsRequirements
Set up GPOs with the following requirements
Antivirus protection Office suite An accounting application
Set up GPOs with the following requirements
Antivirus protection Office suite An accounting application
Practice: Managing the Deployment of Group Policy
In this practice, you will
Link a GPO to the domain to remove the Search option from the Start menu
Test the results
Create a conflicting GPO for the Graphics OU and block inheritance at the Sales OU
Test the results
Enforce the Remove Search GPO
Test the results
Lab: Implementing Group Policy
In this lab, you will:
Disable and delete a GPO Create and link multiple GPOs Filter the GPOs to exempt selected users Back up and import GPO settings