Guide to MCSE 70-290, Enhanced 1

Activity 9-1: Creating a Group Policy Object Using the MMC

• Objective: To create a GPO using the Group Policy Object Editor MMC snap-in• Locate the MMC Group Policy Object Editor snap-in

• Create a new GPO

Guide to MCSE 70-290, Enhanced 2

Activity 9-1 (continued)

Guide to MCSE 70-290, Enhanced 3

Activity 9-2: Creating OUs and Moving User Accounts

• Objective: To create new Organizational Units and move existing user accounts into them. • Must be familiar with using OUs for controlling the

application of Group Policy settings

• Create new OUs using Active Directory Users and Computers

• Move users into the new OUs

Guide to MCSE 70-290, Enhanced 4

Activity 9-3: Creating a Group Policy Object and Browsing

Settings Using Active Directory Users and Computers

• Objective: Create a GPO using Active Directory Users and Computers as an alternative to MMC snap-in• From Active Directory Users and Computers, use the

Group Policy tab of the Properties of an existing OU to add and create GPOs

• Browse configuration settings of a Group Policy Object

Guide to MCSE 70-290, Enhanced 5

Activity 9-4: Deleting Group Policy Objects

• Objective: To delete a GPO using Active Directory Users and Computers

• A previously created GPO is deleted from an OU

Guide to MCSE 70-290, Enhanced 6

Activity 9-5: Configuring Group Policy Object User

Desktop Settings• Objective: To configure and test the application of

Group Policy settings • Use Active Directory Users and Computers to

access the desired configuration settings• Configure settings using the Group Policy Object

Editor• Verify that the configured settings have the

expected results

Guide to MCSE 70-290, Enhanced 7

Activity 9-6: Configuring Group Policy Object Security

Settings

• Objective: Use Group Policy settings to configure a logon banner for domain users

• Use Active Directory Users and Computers to access the Default Domain Policy GPO

• Create a logon banner• Verify that the banner appears

Guide to MCSE 70-290, Enhanced 8

Activity 9-7: Configuring File System Security Using Group

Policy Settings• Objective: Use Group Policy settings to configure

security permissions• Create a folder• Use Active Directory Users and Computers to

configure the permissions on the folders• Update Group Policy settings on the server• Verify that the permissions are explicitly defined

Guide to MCSE 70-290, Enhanced 9

Activity 9-8: Assigning Logon Scripts to Users Using Group

Policy• Objective: Use GPOs to assign logon scripts to

domain users• Create a script file• Add the script to the logon policies of a particular

group using Active Directory Users and Computers

• Verify that the script runs for members of the group and not for other users

Guide to MCSE 70-290, Enhanced 10

Activity 9-9: Linking a Group Policy Object to Multiple

Containers• Objective: Link a single GPO to multiple

containers• Using Active Directory Users and Computers,

create and configure a new GPO in one OU• Add the GPO to another OU

Guide to MCSE 70-290, Enhanced 11

Activity 9-10: Configuring Group Policy Object Inheritance

Settings• Objective: Explore and configure Group Policy

inheritance settings• Configure the Default Domain Policy GPO using

Active Directory Users and Computers• Override the Default Domain Policy configuration

at the OU level and verify the override• Configure No Override option at the domain level• Verify No Override option

Guide to MCSE 70-290, Enhanced 12

Activity 9-11: Filtering Group Policy Objects Using Security

Permissions• Objective: Use security permissions to filter and

control the application of Group Policy settings• Using Active Directory Users and Computers, add

a user account to a group but deny the group’s GPO permissions

• Verify that the added user account is not configured with the group’s GPO

Guide to MCSE 70-290, Enhanced 13

Activity 9-12: Determining Group Policy Settings Using

the Resultant Set of Policy Tool• Objective: Use RSoP to determine effective Group

Policy settings• Use Active Directory Users and Computers to

configure the Default Domain Policy• Open a new MMC with the Resultant Set of

Policy snap-in• Use RSoP to Generate RSoP Data

Guide to MCSE 70-290, Enhanced 14

Activity 9-12 (continued)

Guide to MCSE 70-290, Enhanced 15

Activity 9-13: Publishing an Application to Users Using

Group Policy

• Objective: Publish an application using Group Policy settings

• Create a shared folder and copy files into it• Create a GPO to publish the msi software files in

the folder• Login as a member of the group using the GPO

and install the software

Guide to MCSE 70-290, Enhanced 16

Activity 9-14: Assigning an Application to Users Using

Group Policy

• Objective: To assign an application using Group Policy settings

• Create and configure a new GPO to assign software installation to the users in an OU

• Log on as a user in the OU• Verify that the software installs and executes as

expected