Module 6: Implementing Group Policy

Overview Implementing Group Policy Objects Implementing GPOs in a Domain Managing the Deployment of Group Policy

Lesson: Implementing Group Policy Objects What Is Group Policy? Processing Group Policy Objects What Are User and Computer Configuration Settings? Local Computer Group Policy Practice: Set Local Computer Group Policy

What Is Group Policy?

Processing Group Policy Objects Group Policies are processed in the following order: Local computer Group Policy Group Policy objects linked to the site Group Policy objects linked to the domain Group Policy objects linked to the OU

Group Policy settings for users control :  Software settings  Windows settings  Security settings  Desktop settings Group Policy settings for computers control :  Software settings  Windows settings  Security settings  Operating system What Are User and Computer Configuration Settings?

Local Computer Group Policy Local Group Policy Snap-in

Practice: Set Local Computer Group Policy In this practice, you will: Create a custom MMC and add the Group Policy snap-in for the local computer Configure a Group Policy setting to remove the user name from the Start menu Configure a Group Policy setting to prevent Windows Messenger from automatically running at logon

Lesson: Implementing GPOs in a Domain Tools Used to Manage GPOs What Is a GPO Link? How Group Policy Settings Are Inherited in Active Directory Backup, Restore, and Import GPOs Practice: Implementing GPOs in a Domain

Tools Used to Manage GPOs Default Group Policy tools  Active Directory Users and Computers  Active Directory Sites and Services  Local Group Policy Custom Management Console Add-in tools  Group Policy Management Console (GPMC)

What Is a GPO Link? Site Domain OU Domain GPO Organizational Unit GPO Site GPO OU

How Group Policy Settings Are Inherited in Active Directory User or Computer Accounts Domain OU OU GPO 1 OU GPO 2 OU GPO 3

Back Up, Restore, and Import GPOs The GPMC allows you to Back up GPOs Restore GPOs Import settings from backed-up GPOs

Practice: Implementing GPOs in a Domain In this practice, you will: Install the Group Policy Management Console on DEN-CL1 Create an unlinked GPO Create a linked GPO Back up and restore a GPO

Lesson: Managing the Deployment of Group Policy Attributes of a GPO Link Blocking the Inheritance of a GPO What Happens When GPOs Conflict Filtering the Deployment of a GPO Discussion: Modifying Group Policy Inheritance Practice: Managing the Deployment of Group Policy

Attributes of a GPO Link Enforced  Take precedence over other GPO settings Link Enabled or Disabled  Links can be disabled for troubleshooting Deleted  Links can be deleted without deleting the GPO Multiple Links  When there are multiple GPOs linked to a container there is an order of precedence

Blocking the Inheritance of a GPO Sales Production Domain No GPO settings apply GPOs

What Happens When GPOs Conflict How conflicts are resolved: When Group Policy settings in the Active Directory hierarchy conflict, the settings for the child container GPO apply

Filtering the Deployment of a GPO Sales Production Domain Mengph Kimyo Group Apply Group Policy Deny Read and Apply Group Policy Allow GPO

Discussion: Modifying Group Policy Inheritance How do you set up your GPOs? Payroll Sales Contoso.msft Training Requirements Set up GPOs with the following requirements  Antivirus protection  Office suite  An accounting application Set up GPOs with the following requirements  Antivirus protection  Office suite  An accounting application

Practice: Managing the Deployment of Group Policy In this practice, you will Link a GPO to the domain to remove the Search option from the Start menu Test the results Create a conflicting GPO for the Graphics OU and block inheritance at the Sales OU Test the results Enforce the Remove Search GPO Test the results

Lab: Implementing Group Policy In this lab, you will:  Disable and delete a GPO  Create and link multiple GPOs  Filter the GPOs to exempt selected users  Back up and import GPO settings