1. Module 5: Implementing Group Policy

2. Overview Creating and Configuring GPOs
Configuring Group Policy Refresh Rates and Group Policy Settings
Managing GPOs
Verifying and Troubleshooting Group Policy
Delegating Administrative Control of Group Policy
Planning a Group Policy Strategy for the Enterprise

3. Lesson: Creating and Configuring GPOs
Multimedia: Review of Group Policy
GPO Components
Why Specify a Domain Controller for Managing GPOs?
How to Specify a Domain Controller for Managing GPOs
What Are WMI Filters?
How to Filter Group Policy Settings Using WMI Filters
What Is Loopback Processing?
How to Configure the User Group Policy Loopback Processing Mode

4. Multimedia: Review of Group Policy
Site
Domain OU
GPO1
GPO2
GPO3
GPO4

5. Group Policy Container
GPO Components
Contains Group Policy settings
Stores content in two locations
Group Policy Object
Stored in shared SYSVOL folder
Provides Group Policy settings
Group Policy Template
Stored in Active Directory
Provides version information
Group Policy Container

6. Why Specify a Domain Controller for Managing GPOs?
Choose a domain controller to avoid replication conflicts
Options

7. How to Specify a Domain Controller for Managing GPOs
Your instructor will demonstrate how to specify a domain controller to use for domain and site operations

8. What Are WMI Filters? WMI Filter 10 GB 400 MB 35 GB 750 MB
Install Office XP?
500 MB free disk space?
WMI Filter
Administrator
GPO
10 GB
400 MB
35 GB
750 MB

9. How to Filter Group Policy Settings Using WMI Filters
Your instructor will demonstrate how to create a WMI filter and link it to a GPO

10. What Is Loopback Processing?

11. How to Configure the User Group Policy Loopback Processing Mode
Your instructor will demonstrate how to configure the User Group Policy Loopback Processing Mode

12. Practice: Creating and Configuring GPOs
In this practice, you will:
Install the Group Policy Management console
Create and configure GPOs

13. Lesson: Configuring Group Policy Refresh Rates and Group Policy Settings
When Is Group Policy Applied?
How to Assign Group Policy Script Settings
How to Configure Refresh Rates for Group Policy Components
How to Configure Refresh Rates for Domain Controllers and Computers
How to Refresh the Group Policy Settings on a User’s Computer Using Gpupdate.exe

14. When Is Group Policy Applied?
Computer starts
Computer settings applied
Startup scripts run
Refresh Interval
User logs on
User settings applied
Logon scripts run
Refresh Interval

15. How to Assign Group Policy Script Settings
Your instructor will demonstrate how to:
Copy a script
Add the script

16. How to Configure Refresh Rates for Group Policy Components
Your instructor will demonstrate how to configure refresh rates for Group Policy components

17. How to Configure Refresh Rates for Domain Controllers and Computers
Your instructor will demonstrate how to configure refresh rates for domain controllers and computers

18. How to Refresh the Group Policy Settings on a User’s Computer Using Gpupdate.exe
Your instructor will demonstrate how to refresh the Group Policy settings on a user’s computer by using Gpupdate.exe

19. Practice: Configuring Group Policy Refresh Rates and Group Policy Settings
In this practice, you will:
Configure the Group Policy refresh interval for the client computers
Configure Group Policy settings for synchronizing offline files

20. Lesson: Managing GPOs What Is a Copy Operation? How to Copy a GPO
What Is a Backup Operation?
How to Back Up a GPO
What Is a Restore Operation?
How to Restore a GPO
What Is an Import Operation?
How to Import Settings into a GPO

21. What Is a Copy Operation?
DACL
User 1
GPO1
Read
Full Control
GPO2
Copy Operation
A copy of a GPO transfers only the settings within a GPO
The new GPO is created unlinked

22. How to Copy a GPO
Your instructor will demonstrate how to copy a GPO

23. What Is a Backup Operation?
GPO1
Backup Operation
GPO1
Backup of
a GPO
In a backup operation, Group Policy Management export all data in the GPO to the selected file and saves the GPT files

24. How to Back Up a GPO
Your instructor will demonstrate how to back up a GPO

25. What Is a Restore Operation?
GPO1
GPO1
Backed-up GPO
In a restore operation, the contents of the GPO are returned to exactly the same state

26. How to Restore a GPO Your instructor will demonstrate how to:
Restore a previous version of an existing GPO
Restore a deleted GPO that appears in the list of GPOs

27. What Is an Import Operation?
GPO1
GPO2
GPO
Settings
In an import operation, all GPO settings are copied from the source to the target GPO

28. How to Import Settings into a GPO
Your instructor will demonstrate how to import settings into a GPO

29. Practice: Managing GPOs
In this practice, you will:
Copy a GPO
Back up the GPO
Delete the backed-up GPO
Restore the deleted GPO

30. Lesson: Verifying and Troubleshooting Group Policy
Common Problems with Implementing Group Policy
How to Verify Group Policy Settings Using Group Policy Modeling Wizard
How to Verify Group Policy Settings Using Group Policy Results

31. Common Problems with Implementing Group Policy
Symptom
Cause
Cannot open a GPO
Read and Write permissions for the GPO are not assigned
Cannot edit a GPO
A networking problem
Cannot apply Group Policy on a security group
GPOs are not applied to security groups
No effect of Group Policy on a site, domain, or organizational unit
Group Policy settings are not configured correctly
No effect of Group Policy in an Active Directory container
GPOs cannot be linked to Active Directory containers
No effect of Group Policy on a client computer
A non-local GPO can overwrite local policies

32. How to Verify Group Policy Settings Using the Group Policy Modeling Wizard
Your instructor will demonstrate how to:
Create a new Group Policy Modeling query
View the query

33. How to Verify Group Policy Settings Using Group Policy Results
Your instructor will demonstrate how to:
Create a new Group Policy Results query
View the query

34. Practice: Verifying and Troubleshooting Group Policy
In this practice, you will verify Group Policy settings by using Group Policy Modeling

35. Lesson: Delegating Administrative Control of Group Policy
Delegation of GPOs
Delegation of Group Policy for a Site, Domain, or Organizational Unit
Delegation of WMI Filters
How to Delegate Administrative Control for Managing Group Policy Links
How to Delegate Administrative Control for Creating and Editing GPOs

36. Delegation of GPOs Methods to assign permission to create GPOs
Allows users to only create GPOs in the domain
Allows users to edit or delete GPOs or link GPO
Add the group or user to the Group Policy Creator Owners group
Explicitly assign the group or user permission to create GPOs

37. Delegation of Group Policy for a Site, Domain, or Organizational Unit
Permissions:
Read and Write permissions to the gPLinks and gPOptions attributes
Link GPOs
Generate Resultant Set of Policy (Planning) permission
Group Policy Modeling
Generate Resultant Set of Policy (Logging) permission
Group Policy Results

38. Delegation of WMI Filters
Payroll Administrator
Corporate Administrator
WMI Filter
Creation
To create a WMI filter, use these permissions:
Create Owner
Full Control
Delegation
To delegate a WMI filter, assign these permissions:
Edit

39. How to Delegate Administrative Control for Managing Group Policy Links
Your instructor will demonstrate how to delegate administrative control for managing Group Policy links

40. How to Delegate Administrative Control for Creating and Editing GPOs
Your instructor will demonstrate how to delegate administrative control for:
Creating GPOs
Editing GPOs

41. Practice: Delegating Administrative Control of Group Policy
In this practice, you will:
Add an account to the Group Policy Creator Owners group
Delegate the ability to manage Group Policy links

42. Lesson: Planning a Group Policy Strategy for the Enterprise
Guidelines for Planning GPOs
Guidelines for Determining GPO Inheritance
Guidelines for Determining a Group Policy Strategy for Sites
Guidelines for Planning the Administration of GPOs
Guidelines for Deploying GPOs

43. Guidelines for Planning GPOs
Apply GPO settings at the highest level
Reduce the number of GPOs
Create specialized GPOs
Disable computer or user configuration settings

44. Guidelines for Determining GPO Inheritance
Use the Enforced option only when required
Use Block Inheritance sparingly
Use security filtering only when necessary

45. Guidelines for Determining a Group Policy Strategy for Sites
Apply a GPO to a site only when the settings are specific to the site and not to the domain
Create GPOs in the domain that has the most domain controllers in that site

46. Guidelines for Planning the Administration of GPOs
Identify your strategy for managing GPOs
Organize GPOs according to administrative maintenance
Plan the auditing of GPOs

47. Guidelines for Deploying GPOs
Test Group Policy settings
Document the Group Policy plan

48. Practice: Planning a Group Policy Strategy for the Enterprise
In this practice, you will:
Determine the effects of Group Policy settings
Manage deployment of Group Policy

49. Lab A: Implementing Group Policy
Creating and Configuring GPOs
Linking GPOs
Verifying Group Policy Settings