guide to mcse 70-290, enhanced 1 activity 9-1: creating a group policy object using the mmc...
Post on 23-Dec-2015
214 Views
Preview:
TRANSCRIPT
Guide to MCSE 70-290, Enhanced 1
Activity 9-1: Creating a Group Policy Object Using the MMC
• Objective: To create a GPO using the Group Policy Object Editor MMC snap-in• Locate the MMC Group Policy Object Editor snap-in
• Create a new GPO
Guide to MCSE 70-290, Enhanced 2
Activity 9-1 (continued)
Guide to MCSE 70-290, Enhanced 3
Activity 9-2: Creating OUs and Moving User Accounts
• Objective: To create new Organizational Units and move existing user accounts into them. • Must be familiar with using OUs for controlling the
application of Group Policy settings
• Create new OUs using Active Directory Users and Computers
• Move users into the new OUs
Guide to MCSE 70-290, Enhanced 4
Activity 9-3: Creating a Group Policy Object and Browsing
Settings Using Active Directory Users and Computers
• Objective: Create a GPO using Active Directory Users and Computers as an alternative to MMC snap-in• From Active Directory Users and Computers, use the
Group Policy tab of the Properties of an existing OU to add and create GPOs
• Browse configuration settings of a Group Policy Object
Guide to MCSE 70-290, Enhanced 5
Activity 9-4: Deleting Group Policy Objects
• Objective: To delete a GPO using Active Directory Users and Computers
• A previously created GPO is deleted from an OU
Guide to MCSE 70-290, Enhanced 6
Activity 9-5: Configuring Group Policy Object User
Desktop Settings• Objective: To configure and test the application of
Group Policy settings • Use Active Directory Users and Computers to
access the desired configuration settings• Configure settings using the Group Policy Object
Editor• Verify that the configured settings have the
expected results
Guide to MCSE 70-290, Enhanced 7
Activity 9-6: Configuring Group Policy Object Security
Settings
• Objective: Use Group Policy settings to configure a logon banner for domain users
• Use Active Directory Users and Computers to access the Default Domain Policy GPO
• Create a logon banner• Verify that the banner appears
Guide to MCSE 70-290, Enhanced 8
Activity 9-7: Configuring File System Security Using Group
Policy Settings• Objective: Use Group Policy settings to configure
security permissions• Create a folder• Use Active Directory Users and Computers to
configure the permissions on the folders• Update Group Policy settings on the server• Verify that the permissions are explicitly defined
Guide to MCSE 70-290, Enhanced 9
Activity 9-8: Assigning Logon Scripts to Users Using Group
Policy• Objective: Use GPOs to assign logon scripts to
domain users• Create a script file• Add the script to the logon policies of a particular
group using Active Directory Users and Computers
• Verify that the script runs for members of the group and not for other users
Guide to MCSE 70-290, Enhanced 10
Activity 9-9: Linking a Group Policy Object to Multiple
Containers• Objective: Link a single GPO to multiple
containers• Using Active Directory Users and Computers,
create and configure a new GPO in one OU• Add the GPO to another OU
Guide to MCSE 70-290, Enhanced 11
Activity 9-10: Configuring Group Policy Object Inheritance
Settings• Objective: Explore and configure Group Policy
inheritance settings• Configure the Default Domain Policy GPO using
Active Directory Users and Computers• Override the Default Domain Policy configuration
at the OU level and verify the override• Configure No Override option at the domain level• Verify No Override option
Guide to MCSE 70-290, Enhanced 12
Activity 9-11: Filtering Group Policy Objects Using Security
Permissions• Objective: Use security permissions to filter and
control the application of Group Policy settings• Using Active Directory Users and Computers, add
a user account to a group but deny the group’s GPO permissions
• Verify that the added user account is not configured with the group’s GPO
Guide to MCSE 70-290, Enhanced 13
Activity 9-12: Determining Group Policy Settings Using
the Resultant Set of Policy Tool• Objective: Use RSoP to determine effective Group
Policy settings• Use Active Directory Users and Computers to
configure the Default Domain Policy• Open a new MMC with the Resultant Set of
Policy snap-in• Use RSoP to Generate RSoP Data
Guide to MCSE 70-290, Enhanced 14
Activity 9-12 (continued)
Guide to MCSE 70-290, Enhanced 15
Activity 9-13: Publishing an Application to Users Using
Group Policy
• Objective: Publish an application using Group Policy settings
• Create a shared folder and copy files into it• Create a GPO to publish the msi software files in
the folder• Login as a member of the group using the GPO
and install the software
Guide to MCSE 70-290, Enhanced 16
Activity 9-14: Assigning an Application to Users Using
Group Policy
• Objective: To assign an application using Group Policy settings
• Create and configure a new GPO to assign software installation to the users in an OU
• Log on as a user in the OU• Verify that the software installs and executes as
expected
top related