Upload
giles-bates
View
299
Download
3
Tags:
Embed Size (px)
Citation preview
Module 5: Implementing Group Policy
Overview
Creating and Configuring GPOs
Configuring Group Policy Refresh Rates and Group Policy Settings
Managing GPOs
Verifying and Troubleshooting Group Policy
Delegating Administrative Control of Group Policy
Planning a Group Policy Strategy for the Enterprise
Lesson: Creating and Configuring GPOs
Multimedia: Review of Group Policy
GPO Components
Why Specify a Domain Controller for Managing GPOs?
How to Specify a Domain Controller for Managing GPOs
What Are WMI Filters?
How to Filter Group Policy Settings Using WMI Filters
What Is Loopback Processing?
How to Configure the User Group Policy Loopback Processing Mode
Multimedia: Review of Group Policy
Site
Domain
OUOUOUOU
OU
GPO1GPO1
GPO2GPO2
GPO3GPO3
GPO4GPO4
GPO Components
Contains Group Policy settingsStores content in two locations
Group Policy ObjectGroup Policy Object
Stored in shared SYSVOL folder Provides Group Policy settingsStored in shared SYSVOL folder Provides Group Policy settings
Group Policy TemplateGroup Policy Template
Stored in Active DirectoryProvides version informationStored in Active DirectoryProvides version information
Group Policy ContainerGroup Policy Container
Why Specify a Domain Controller for Managing GPOs?
Choose a domain controller to avoid replication conflicts
OptionsOptions
How to Specify a Domain Controller for Managing GPOs
Your instructor will demonstrate how to specify a domain controller to use for domain and site operationsYour instructor will demonstrate how to specify a domain controller to use for domain and site operations
What Are WMI Filters?
500 MB free disk space?
WMI FilterWMI Filter
Administrator
InstallOffice XP?
InstallOffice XP?
10 GB 400 MB 35 GB 750 MB
GPO
How to Filter Group Policy Settings Using WMI Filters
Your instructor will demonstrate how to create a WMI filter and link it to a GPOYour instructor will demonstrate how to create a WMI filter and link it to a GPO
What Is Loopback Processing?
How to Configure the User Group Policy Loopback Processing Mode
Your instructor will demonstrate how to configure the User Group Policy Loopback Processing ModeYour instructor will demonstrate how to configure the User Group Policy Loopback Processing Mode
Practice: Creating and Configuring GPOs
In this practice, you will:
Install the Group Policy Management console
Create and configure GPOs
Lesson: Configuring Group Policy Refresh Rates and Group Policy Settings
When Is Group Policy Applied?
How to Assign Group Policy Script Settings
How to Configure Refresh Rates for Group Policy Components
How to Configure Refresh Rates for Domain Controllers and Computers
How to Refresh the Group Policy Settings on a User’s Computer Using Gpupdate.exe
When Is Group Policy Applied?
Computer startsComputer starts
Computer settings applied
Startup scripts run
Computer settings applied
Startup scripts run
Refresh IntervalRefresh Interval
User logs onUser logs on
User settings applied
Logon scripts run
User settings applied
Logon scripts run
Refresh IntervalRefresh Interval
How to Assign Group Policy Script Settings
Your instructor will demonstrate how to:Your instructor will demonstrate how to:
Copy a script
Add the script
Copy a script
Add the script
How to Configure Refresh Rates for Group Policy Components
Your instructor will demonstrate how to configure refresh rates for Group Policy componentsYour instructor will demonstrate how to configure refresh rates for Group Policy components
How to Configure Refresh Rates for Domain Controllers and Computers
Your instructor will demonstrate how to configure refresh rates for domain controllers and computersYour instructor will demonstrate how to configure refresh rates for domain controllers and computers
How to Refresh the Group Policy Settings on a User’s Computer Using Gpupdate.exe
Your instructor will demonstrate how to refresh the Group Policy settings on a user’s computer by using Gpupdate.exe
Your instructor will demonstrate how to refresh the Group Policy settings on a user’s computer by using Gpupdate.exe
Practice: Configuring Group Policy Refresh Rates and Group Policy Settings
In this practice, you will:
Configure the Group Policy refresh interval for the client computers
Configure Group Policy settings for synchronizing offline files
Lesson: Managing GPOs
What Is a Copy Operation?
How to Copy a GPO
What Is a Backup Operation?
How to Back Up a GPO
What Is a Restore Operation?
How to Restore a GPO
What Is an Import Operation?
How to Import Settings into a GPO
What Is a Copy Operation?
A copy of a GPO transfers only the settings within a GPO
The new GPO is created unlinked
A copy of a GPO transfers only the settings within a GPO
The new GPO is created unlinked
DACLDACL
User 1
GPO1GPO1Read
Full Control
DACLDACL
User 1
GPO2GPO2Read
Full Control
Copy Operation
How to Copy a GPO
Your instructor will demonstrate how to copy a GPOYour instructor will demonstrate how to copy a GPO
What Is a Backup Operation?
In a backup operation, Group Policy Management export all data in the GPO to the selected file and saves the GPT filesIn a backup operation, Group Policy Management export all data in the GPO to the selected file and saves the GPT files
Backup Operation
Backup ofa GPO
Backup ofa GPO
GPO1GPO1
GPO1GPO1
How to Back Up a GPO
Your instructor will demonstrate how to back up a GPOYour instructor will demonstrate how to back up a GPO
What Is a Restore Operation?
In a restore operation, the contents of the GPO are returned to exactly the same stateIn a restore operation, the contents of the GPO are returned to exactly the same state
Restore Operation
GPO1GPO1
Backed-up GPOBacked-up GPO
GPO1GPO1
How to Restore a GPO
Your instructor will demonstrate how to:Your instructor will demonstrate how to:
Restore a previous version of an existing GPO
Restore a deleted GPO that appears in the list of GPOs
Restore a previous version of an existing GPO
Restore a deleted GPO that appears in the list of GPOs
What Is an Import Operation?
In an import operation, all GPO settings are copied from the source to the target GPOIn an import operation, all GPO settings are copied from the source to the target GPO
GPO1GPO1
Import Operation
GPO2GPO2
GPOSettings
GPOSettings
How to Import Settings into a GPO
Your instructor will demonstrate how to import settings into a GPOYour instructor will demonstrate how to import settings into a GPO
Practice: Managing GPOs
In this practice, you will:
Copy a GPO
Back up the GPO
Delete the backed-up GPO
Restore the deleted GPO
Lesson: Verifying and Troubleshooting Group Policy
Common Problems with Implementing Group Policy
How to Verify Group Policy Settings Using Group Policy Modeling Wizard
How to Verify Group Policy Settings Using Group Policy Results
Common Problems with Implementing Group Policy
Symptom Cause
Cannot open a GPO Read and Write permissions for the GPO are not assigned
Cannot edit a GPO A networking problem
Cannot apply Group Policy on a security group
GPOs are not applied to security groups
No effect of Group Policy on a site, domain, or organizational unit
Group Policy settings are not configured correctly
No effect of Group Policy in an Active Directory container
GPOs cannot be linked to Active Directory containers
No effect of Group Policy on a client computer
A non-local GPO can overwrite local policies
How to Verify Group Policy Settings Using the Group Policy Modeling Wizard
Your instructor will demonstrate how to:Your instructor will demonstrate how to:
Create a new Group Policy Modeling query
View the query
Create a new Group Policy Modeling query
View the query
How to Verify Group Policy Settings Using Group Policy Results
Your instructor will demonstrate how to:Your instructor will demonstrate how to:
Create a new Group Policy Results query
View the query
Create a new Group Policy Results query
View the query
Practice: Verifying and Troubleshooting Group Policy
In this practice, you will verify Group Policy settings by using Group Policy Modeling
Lesson: Delegating Administrative Control of Group Policy
Delegation of GPOs
Delegation of Group Policy for a Site, Domain, or Organizational Unit
Delegation of WMI Filters
How to Delegate Administrative Control for Managing Group Policy Links
How to Delegate Administrative Control for Creating and Editing GPOs
Delegation of GPOs
Methods to assign permission to create GPOs
Allows users to only create GPOs in the domain
Allows users to edit or delete GPOs or link GPO
Add the group or user to the Group Policy Creator Owners group
Explicitly assign the group or user permission to create GPOs
Delegation of Group Policy for a Site, Domain, or Organizational Unit
Permissions:Permissions:
Read and Write permissions to the gPLinks and gPOptions attributes
Read and Write permissions to the gPLinks and gPOptions attributes
Link GPOsLink GPOs
Generate Resultant Set of Policy (Logging) permission
Generate Resultant Set of Policy (Logging) permission
Group Policy ResultsGroup Policy Results
Generate Resultant Set of Policy (Planning) permission
Generate Resultant Set of Policy (Planning) permission
Group Policy ModelingGroup Policy Modeling
OU
OU OU
Group PolicyGroup Policy
Site
Domain
Delegation of WMI Filters
Payroll Administrator
CorporateAdministrator
WMI FilterWMI Filter
CreationCreationTo create a WMI filter, use these permissions:To create a WMI filter, use these permissions:
Create Owner
Full Control
Create Owner
Full Control
DelegationDelegationTo delegate a WMI filter, assign these permissions:To delegate a WMI filter, assign these permissions:
Edit
Full Control
Edit
Full Control
How to Delegate Administrative Control for Managing Group Policy Links
Your instructor will demonstrate how to delegate administrative control for managing Group Policy linksYour instructor will demonstrate how to delegate administrative control for managing Group Policy links
How to Delegate Administrative Control for Creating and Editing GPOs
Your instructor will demonstrate how to delegate administrative control for:Your instructor will demonstrate how to delegate administrative control for:
Creating GPOs
Editing GPOs
Creating GPOs
Editing GPOs
Practice: Delegating Administrative Control of Group Policy
In this practice, you will:
Add an account to the Group Policy Creator Owners group
Delegate the ability to manage Group Policy links
Lesson: Planning a Group Policy Strategy for the Enterprise
Guidelines for Planning GPOs
Guidelines for Determining GPO Inheritance
Guidelines for Determining a Group Policy Strategy for Sites
Guidelines for Planning the Administration of GPOs
Guidelines for Deploying GPOs
Guidelines for Planning GPOs
Apply GPO settings at the highest levelApply GPO settings at the highest level
Reduce the number of GPOsReduce the number of GPOs
Create specialized GPOsCreate specialized GPOs
Disable computer or user configuration settingsDisable computer or user configuration settings
Guidelines for Determining GPO Inheritance
Use the Enforced option only when requiredUse the Enforced option only when required
Use Block Inheritance sparinglyUse Block Inheritance sparingly
Use security filtering only when necessaryUse security filtering only when necessary
Guidelines for Determining a Group Policy Strategy for Sites
Apply a GPO to a site only when the settings are specific to the site and not to the domainApply a GPO to a site only when the settings are specific to the site and not to the domain
Create GPOs in the domain that has the most domain controllers in that siteCreate GPOs in the domain that has the most domain controllers in that site
Guidelines for Planning the Administration of GPOs
Identify your strategy for managing GPOsIdentify your strategy for managing GPOs
Organize GPOs according to administrative maintenanceOrganize GPOs according to administrative maintenance
Plan the auditing of GPOsPlan the auditing of GPOs
Guidelines for Deploying GPOs
Test Group Policy settings Test Group Policy settings
Document the Group Policy plan Document the Group Policy plan
Practice: Planning a Group Policy Strategy for the Enterprise
In this practice, you will:
Determine the effects of Group Policy settings
Manage deployment of Group Policy
Lab A: Implementing Group Policy
Creating and Configuring GPOs
Linking GPOs
Verifying Group Policy Settings