Module 6: Implementing Group Policy

Overview

Implementing Group Policy Objects

Implementing GPOs in a Domain

Managing the Deployment of Group Policy

Lesson: Implementing Group Policy Objects

What Is Group Policy?

Processing Group Policy Objects

What Are User and Computer Configuration Settings?

Local Computer Group Policy

Practice: Set Local Computer Group Policy

What Is Group Policy?

Processing Group Policy Objects

Group Policies are processed in the following order:

Local computer Group Policy

Group Policy objects linked to the site

Group Policy objects linked to the domain

Group Policy objects linked to the OU

Group Policy settings for users control: Software settings

Windows settings

Security settings

Desktop settings

Group Policy settings for computers control: Software settings

Windows settings

Security settings

Operating system

What Are User and Computer Configuration Settings?

Local Computer Group Policy

Local Group Policy Snap-in

Practice: Set Local Computer Group Policy

In this practice, you will:

Create a custom MMC and add the Group Policy snap-in for the local computer

Configure a Group Policy setting to remove the user name from the Start menu

Configure a Group Policy setting to prevent Windows Messenger from automatically running at logon

Lesson: Implementing GPOs in a Domain

Tools Used to Manage GPOs

What Is a GPO Link?

How Group Policy Settings Are Inherited in Active Directory

Backup, Restore, and Import GPOs

Practice: Implementing GPOs in a Domain

Tools Used to Manage GPOs

Default Group Policy tools

Active Directory Users and Computers Active Directory Sites and Services Local Group Policy Custom Management Console

Add-in tools

Group Policy Management Console (GPMC)

What Is a GPO Link?

Site

Domain

OUDomain GPO

Organizational Unit GPO

Organizational Unit GPO

Site GPO

OUOU

OU

OU

How Group Policy Settings Are Inherited in Active Directory

User orComputerAccounts

Domain

OU

OU

OU

OUGPO 1

OUGPO 2

OUGPO 3

Back Up, Restore, and Import GPOs

The GPMC allows you to

Back up GPOs

Restore GPOs

Import settings from backed-up GPOs

Practice: Implementing GPOs in a Domain

In this practice, you will:

Install the Group Policy Management Console on DEN-CL1

Create an unlinked GPO

Create a linked GPO

Back up and restore a GPO

Lesson: Managing the Deployment of Group Policy

Attributes of a GPO Link

Blocking the Inheritance of a GPO

What Happens When GPOs Conflict

Filtering the Deployment of a GPO

Discussion: Modifying Group Policy Inheritance

Practice: Managing the Deployment of Group Policy

Attributes of a GPO Link

Enforced

Take precedence over other GPO settings

Link Enabled or Disabled

Links can be disabled for troubleshooting

Deleted

Links can be deleted without deleting the GPO

Multiple Links

When there are multiple GPOs linked to a container there is an order of precedence

Blocking the Inheritance of a GPO

Sales

Production

Domain

No GPO settings apply

No GPO settings apply

GPOs

What Happens When GPOs Conflict

How conflicts are resolved:

When Group Policy settings in the Active Directory hierarchy conflict, the settings for the child container GPO apply

Filtering the Deployment of a GPO

Sales

Production

Domain

Mengph

Kimyo

GroupApply Group Policy

Apply Group Policy

Deny

Read and Apply Group Policy

Read and Apply Group Policy

Allow

GPO

Discussion: Modifying Group Policy Inheritance

How do you set up your GPOs?How do you set up your GPOs?

Payroll

Sales

Contoso.msft

Training

RequirementsRequirements

Set up GPOs with the following requirements

Antivirus protection Office suite An accounting application

Set up GPOs with the following requirements

Antivirus protection Office suite An accounting application

Practice: Managing the Deployment of Group Policy

In this practice, you will

Link a GPO to the domain to remove the Search option from the Start menu

Test the results

Create a conflicting GPO for the Graphics OU and block inheritance at the Sales OU

Test the results

Enforce the Remove Search GPO

Test the results

Lab: Implementing Group Policy

In this lab, you will:

Disable and delete a GPO Create and link multiple GPOs Filter the GPOs to exempt selected users Back up and import GPO settings