CN1276 Server Kemtis Kunanuraksapong MSIS with Distinction MCTS, MCDST, MCP, A+

Agenda Chapter 10: Planning a Group Policy Management and Implementation Strategy Quiz Exercise

Group Policy Management Console Import and copy GPO settings to and from the file system Backup and restoration of GPOs Resultant Set of Policy (RSoP) functionality integration Hypertext Markup Language (HTML) reports allow read-only views of GPO settings and RSoP information Search function

Group Policy Management Console Is located in the Administrative Tools ▫See Figure 10-1 on Page 205 ▫Link order  See Figure 10-2 on Page 205 ▫Group Policy Inheritance  See Figure 10-3 on Page 205 ▫Delegation  See Figure 10-4 on Page 206

Managing an Individual GPO When a GPO is selected in the Group Policy Management interface: ▫Scope ▫Details ▫Settings ▫Delegation

Scope Allows administrators to view the locations to which the policy is linked Security filtering using permissions and WMI are available for viewing, editing, or creating

Detail Allows the GPO to be enabled or disabled Displays read-only information ▫The owner ▫GUID ▫Creation date ▫Last modification date

Settings HTML report ▫View GPO settings that do not have the original default values ▫Right-clicking within this view to print or save the report

Delegation Lists the users and groups that have access to this GPO Lists the permissions that apply to them The Advanced button allows access to the Security tab to directly view the GPO’s ACL

Filtering Group Policy Scope Block Policy Inheritance policy setting Enforce Two additional filtering methods ▫Security Group Filtering  Uses the GPO’s Security tab to determine user and group account access to the policy ▫WMI Filtering  Uses filters written in the WMI Query Language (WQL) to control GPO application.

Windows Management Instrumentation (WMI) A component of the MS Windows that provides management information and control in an enterprise environment You can use WMI: ▫To create queries based on hardware, software, operating systems, and services ▫To gather data or to determine where items, such as GPOs, will be applied. ▫To control which users or computers will be affected by a GPO based on defined criteria

Windows Management Instrumentation (WMI) To find all Win XP Prof. ▫Select * from Win32_OperatingSystem where Caption = “Microsoft Windows XP Professional” Only one WMI filter can be applied to each GPO See Table 10-2 on Page 211 for more WMI filter string example

Group Policy EXCEPTION You can applied the GPO to the domain and make an exception list ▫ virtues-and-vices-of-gpo-deny-aces/

Effective Policy Settings Resultant Set of Policy Wizard (MMC Snap-in) Group Policy Results and Group Policy Modeling components of Group Policy Management GPResult command-line tool

Resultant Set of Policy (RSoP) The sum of the policies applied to a user or computer after all filters, security group permissions, and inheritance settings Two modes within RSoP: ▫Planning mode  To simulate the effect of policy settings prior to implementing them on a computer or user ▫Logging mode  Useful for documenting and understanding how combined policies are affecting users and computers

Using GPResult Command GPResult allows you to create and display an RSoP query from the command line ▫It provides comprehensive information about the operating system, the user, and the computer

Assignment Case Scenario 10-1 ▫Question 2 ▫Question 3 Matching ▫1-10 Multiple Choice ▫1-10 Online Lab 10