Presentation is loading. Please wait.

Presentation is loading. Please wait.

Group Policy - Part 2 of 3 Rick Claus IT Pro Advisor Microsoft Canada

Similar presentations


Presentation on theme: "Group Policy - Part 2 of 3 Rick Claus IT Pro Advisor Microsoft Canada"— Presentation transcript:

1 Group Policy - Part 2 of 3 Rick Claus IT Pro Advisor Microsoft Canada

2 What Will We Cover? Advanced Group Policy management Deploying software with Group Policy Group Policy troubleshooting

3 Agenda Implementing Group Policy Deploying Software Troubleshooting Group Policy

4 Domain-Level Security Settings Account Policies Local Policies IP Security Policies File and Registry ACLs Software Restriction Policies Account Policies Local Policies IP Security Policies File and Registry ACLsSoftware Restriction Policies

5 Demo Configuring Domain Policies demonstration

6 Software Restriction Policies Application started Hash Rule Certificate Rule Path Rule Internet Zone Rule

7 Using Software Restriction Policies RuleType of RuleDescriptionSetting 1Hash ruleHash of pagefileconfig.vbs Disallowed 2Certificate ruleIT management certificate Unrestricted 3Path rule%windir%\system32 \*.vbs Unrestricted 4Path rule*.vbsDisallowed 5Path rule%\windir%Unrestricted C:\WINDOWS\SYSTEM32\eventquery.vbsC:\WINDOWS\SYSTEM32\pagefileconfig.vbs \\LOGIN_SRV\Scripts\CustomerScript1.vbs C:\Documents and Settings\ILUVU.txt.vbs

8 Demo Software Restriction Policies demonstration

9 Managing Desktops Local Folder Shared Network Folder Elevated privileges

10 Demo Managing Desktops demonstration

11 Group Policy Filtering Security filtering Refines which users and computers process GPO WMI filtering Filter based on attributes of target computer Best practice: If you deny GPOs to certain users, disable Read access as well.

12 Group Policy Inheritance Link order Block inheritance Enforcement Link status

13 Demo Group Policy Filtering and Inheritance demonstration

14 Agenda Implementing Group Policy Deploying Software Troubleshooting Group Policy

15 Software Deployment Options SMS WSUS Group Policy Rich, granular software distribution Approve and distribute critical updates Targeted software deployment

16 Group Policy Software Deployment

17 Demo Deploying Software with Group Policy demonstration

18 Session Recap Domain-level security settings Software restriction policies Group Policy filtering and inheritance Software deployment with Group Policy

19 Agenda Implementing Group Policy Deploying Software Troubleshooting Group Policy

20 Use the Troubleshooting Flowchart Does Group Policy Results lists the policy as applied? Yes No Is the setting listed? Is the GPO in the Denied list? 1. Inheritance 2. Asynchronous 3. Loopback 1. Replication 2. GP Refresh 3. Slow Link 1. Security Filtering 2. Disabled GPO 3. WMI Filter 1. SOM 2. GP Refresh 3. Network Yes No Yes No

21 Network and Replication Issues Intersite Replication Slow Link Connections DNS SMB and LDAP

22 Group Policy Troubleshooting Tools > GPResult.exe > GPMonitor.exe > GPOTool.exe > ADDiag.exe

23 Demo Troubleshooting Group Policy demonstration

24 Session Summary Group Policy is a powerful tool Deploy software through Group Policy Several tools are available for troubleshooting Group Policy

25 For More Information Visit TechNet at Rick Claus IT Pro Advisor Microsoft Canada


Download ppt "Group Policy - Part 2 of 3 Rick Claus IT Pro Advisor Microsoft Canada"

Similar presentations


Ads by Google