1. Understanding Group Policy Part 3 of 3 Rick Claus IT Pro Advisor Microsoft Canada rick.claus@microsoft.comhttp://blogs.technet.com/rclaus

2. What Will We Cover? Group Policy Management Advanced Group Policy Security Scripting Group Policy Group Policy Modeling

3. Agenda Managing.ADM Files Scripting Group Policy Implementing Advanced Security Using WMI Filters Migrating GPOs across Domains Using Advanced Group Policy Modeling

4. Administrative Template Extension Simple way to configure policy Largest Group Policy extension.ADM files enable user interface

5. Using ADM Template Extensions Domain Controller Active Directory Database SYSVOL Modify Group Policy 1 1 Stored on domain controller 2 2 Policy applied to client 3 3

6. Demo Reviewing.ADM Files demonstration

7. Custom ADM Templates Use to Do not use to Increase security Disable interface options Disable confusing items Control data Configure all settings Create unsupported policy

8. Registry Policies HKEY_LOCAL_MACHINE\SOFTWARE\policies HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\policies HKEY_CURRENT_USER\SOFTWARE\policies HKEY_CURRENT_USER \SOFTWARE\Microsoft\Windows\CurrentVersion\policies

9. Demo Customizing.ADM Templates demonstration

10. Agenda Managing.ADM Files Scripting Group Policy Implementing Advanced Security Using WMI Filters Migrating GPOs across Domains Using Advanced Group Policy Modeling

11. Scripting Group Policy GPMC COM Interfaces Sample Scripts Backing up GPOsCreating a new GPOCreating environment using XMLImporting a GPOListing disabled GPOsListing GPO information

12. Demo Scripting Group Policy Using GPMC Scripts Changing the Script Host Engine Using Scripts to Back up GPOs demonstration

13. Agenda Managing.ADM Files Scripting Group Policy Implementing Advanced Security Using WMI Filters Migrating GPOs across Domains Using Advanced Group Policy Modeling

14. Exclude Accounts from Group Policy Domain Controller Administrator

15. Demo Configuring Group Policy ACLs Protect Administrator from Group Policy demonstration

16. Delegating Control of GPOs Domain Controller Administrator Delegate

17. Demo Delegating Administration Delegating create GPOs to ITGroup Delegating Sales User GPO demonstration

18. Security Configuration and Analysis Does the hard work Enables quick review Ensures policies are enforced Allows local security configuration

19. Security Configuration Wizard download.microsoft.com/download/f/7/1/f71adf6e-dbab-48a2-9a29- 9e481110fd55/SCWQuickStartDoc.doc Administrator

20. Demo Applying Security Templates demonstration

21. Agenda Managing.ADM Files Scripting Group Policy Implementing Advanced Security Using WMI Filters Migrating GPOs across Domains Using Advanced Group Policy Modeling

22. Windows 2000 Windows XP WMI Filtering Domain Controller WMI Filter XP Professional only

23. Demo Using WMI Filters Creating WMI Filters Applying WMI Filters Modeling WMI Filters demonstration

24. Agenda Managing.ADM Files Scripting Group Policy Implementing Advanced Security Using WMI Filters Migrating GPOs across Domains Using Advanced Group Policy Modeling

25. GPO Backup Copying GPOs between Domains us.contoso.com uk.contoso.com GPO Copy us.contoso.com us.fabrikam.com GPO Import

26. Demo Migrating GPOs across Domains demonstration

27. Agenda Managing.ADM Files Scripting Group Policy Implementing Advanced Security Using WMI Filters Migrating GPOs across Domains Using Advanced Group Policy Modeling

28. Group Policy Modeling Overview Group Policy Modeling Wizard Group Policy Results Wizard HTML Reports www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Dep Kit/b8af2303-dac9-4fd5-9717-c3a7f553c627.mspx

29. Loopback Processing Changes GPO processing order Process only computer settings Merge user and computer settings

30. Demo Modeling GPO Loopback demonstration

31. Session Summary Manage and control your environment more easily Enhance security in your environment Group Policy Modeling predicts behavior of GPOs before implementing them

32. For More Information Visit TechNet at www.microsoft.ca/technet Rick Claus IT Pro Advisor Microsoft Canada rick.claus@microsoft.comhttp://blogs.technet.com/rclaus