© Wiley Inc. 2006. All Rights Reserved. MCSE: Windows Server 2003 Active Directory Planning, Implementation, and Maintenance Study Guide, Second Edition.

Slides:

Advertisements

Similar presentations

By Rashid Khan Lesson 5-Directory Assistance: Administration Using Active Directory Users and Computers.

Advertisements

Guide to MCSE , Enhanced 1 Activity 14-1: Browsing Security Templates Objective: To become familiar with built-in security templates Start  Run.

MCDST : Supporting Users and Troubleshooting a Microsoft Windows XP Operating System Chapter 7: Troubleshoot Security Settings and Local Security.

Understanding Group Policy on Windows Server 2003 Michael J. Murphy TechNet Presenter

Understanding Group Policy on Windows Server 2003.

Module 5: Creating and Configuring Group Policy

Khan Rashid Lesson 11-The Best Policy: Managing Computers and Users Through Group Policy.

70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment, Enhanced Chapter 9: Implementing and Using Group Policy.

Hands-On Microsoft Windows Server 2003 Administration Chapter 4 Managing Group Policy.

9.1 © 2004 Pearson Education, Inc. Exam Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure.

MIS Chapter 91 Ch. 9 – Implement and Use Group Policy MIS 431 – created Spring 2006.

10.1 © 2004 Pearson Education, Inc. Exam Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure.

70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 9: Implementing and Using Group Policy.

Administering Active Directory

Chapter 6: Configuring Security. Group Policy and LGPO Setting Options Software Installation not available with LGPOs Remote Installation Services Scripts.

Hands-On Microsoft Windows Server 2003 Administration Chapter 3 Administering Active Directory.

70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 8: Implementing and Managing Printers.

Lesson 16: Creating Group Policy Objects

7.1 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 7: Introducing Group Accounts.

11 WORKING WITH COMPUTER ACCOUNTS Chapter 8. Chapter 8: WORKING WITH COMPUTER ACCOUNTS2 CHAPTER OVERVIEW  Describe the process of adding a computer to.

© Wiley Inc All Rights Reserved. MCSE: Windows Server 2003 Active Directory Planning, Implementation, and Maintenance Study Guide, Second Edition.

11 WORKING WITH COMPUTER ACCOUNTS Chapter 8. Chapter 8: WORKING WITH COMPUTER ACCOUNTS2 CHAPTER OVERVIEW Describe the process of adding a computer to.

Guide to MCSE , Enhanced 1 Activity 9-1: Creating a Group Policy Object Using the MMC Objective: To create a GPO using the Group Policy Object Editor.

9.1 © 2004 Pearson Education, Inc. Lesson 9: Implementing Group Policy in Windows 2000 Server Exam Microsoft® Windows® 2000 Directory Services Infrastructure.

9.1 © 2004 Pearson Education, Inc. Exam Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure.

MCTS Guide to Configuring Microsoft Windows Server 2008 Active Directory Chapter 3: Introducing Active Directory.

1 Chapter Overview Understanding Group Policies Implementing Group Policies Using Security Policies Troubleshooting Group Policy Problems.

Corso referenti S.I.R.A. – Modulo 2 07 – Group Policy 20/11 – 27/11 – 05/12 11/12 – 13/12 (gruppo 1) 12/12 – 15/12 (gruppo 2) Cristiano Gentili, Massimiliano.

70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment, Enhanced Chapter 9: Implementing and Using Group Policy.

70-294: MCSE Guide to Microsoft Windows Server 2003 Active Directory Chapter 12: Deploying and Managing Software with Group Policy.

11 SECURITY TEMPLATES AND PLANNING Chapter 7. Chapter 7: SECURITY TEMPLATES AND PLANNING2 OVERVIEW  Understand the uses of security templates  Explain.

Using Group Policy Lesson 4. Skills Matrix Technology SkillObjective Domain SkillDomain # Creating and Understanding Group Policy Modeling and Group Policy.

70-411: Administering Windows Server 2012

11 MANAGING AND DISTRIBUTING SOFTWARE BY USING GROUP POLICY Chapter 5.

CN1276 Server Kemtis Kunanuraksapong MSIS with Distinction MCTS, MCDST, MCP, A+

Overview Introduction to Managing User Environments Introduction to Administrative Templates Using Administrative Templates in Group Policy Assigning Scripts.

Module 6: Implementing Group Policy. Overview Implementing Group Policy Objects Implementing GPOs in a Domain Managing the Deployment of Group Policy.

© Wiley Inc All Rights Reserved. MCSE: Windows Server 2003 Active Directory Planning, Implementation, and Maintenance Study Guide, Second Edition.

Introduction to Microsoft Management Console (MMC) MMC is a common console framework for management applications. MMC provides a common environment for.

11.1 © 2004 Pearson Education, Inc. Exam Designing a Microsoft ® Windows ® Server 2003 Active Directory and Network Infrastructure Lesson 11: Planning.

1 Chapter Overview Publishing Resources in Active Directory Service Redirecting Folders Using Group Policies Deploying Applications Using Group Policies.

Module 7: Managing the User Environment by Using Group Policy.

Planning a Group Policy Management and Implementation Strategy Lesson 10.

Implementing Group Policy. Overview What is Group Policy Introduction to Group Policy Group Policy Structure How Group Policy Settings Are Applied in.

Section 5: Troubleshooting and Backing Up GPOs Using Group Policy Troubleshooting Tools Integration of RSoP Functionality Using Logging Options Backing.

Section 11: Implementing Software Restriction Policies and AppLocker What Is a Software Restriction Policy? Creating a Software Restriction Policy Using.

Module 5: Implementing Group Policy

CN1276 Server Kemtis Kunanuraksapong MSIS with Distinction MCTS, MCDST, MCP, A+

70-294: MCSE Guide to Microsoft Windows Server 2003 Active Directory, Enhanced Chapter 11: Group Policy for Corporate Policy.

Module 5: Creating and Configuring Group Policies.

Module 4 Planning for Group Policy. Module Overview Planning Group Policy Application Planning Group Policy Processing Planning the Management of Group.

1 Group Policies (Week 11, Monday 3/19/2007) © Abdou Illia, Spring 2007.

1 Chapter Overview Managing Object and Container Permissions Locating and Moving Active Directory Objects Delegating Control Troubleshooting Active Directory.

Administering Group Policy Chapter Eleven. Exam Objectives in this Chapter  Plan a Group Policy strategy using Resultant Set of Policy Planning mode.

Company Confidential 1 A Course on Planning A Group Policy Management And Implementation Strategy Prepared for: *Stars* New Horizons Certified Professional.

Implementing Group Policy

11 PLANNING A GROUP POLICY MANAGEMENT AND IMPLEMENTATION STRATEGY Chapter 10.

11 INTRODUCTION TO GROUP POLICY Chapter 7. Chapter 7: INTRODUCTION TO GROUP POLICY2 WHAT CAN YOU DO WITH GROUP POLICY?  Control the user environment.

Module 6 Creating and Configuring Group Policy. Module Overview Overview of Group Policy Configuring the Scope of Group Policy Objects Evaluating the.

Chapter 7: Managing and Troubleshooting Group Policy.

10.1 © 2004 Pearson Education, Inc. Lesson 10: Specifying Group Policy Settings Exam Microsoft® Windows® 2000 Directory Services Infrastructure.

Windows Server 2003 群組原則設定與管理林寶森

Designing Group Policy Planning Deployment of Group Policy Troubleshooting Group Policy.

GROUP POLICY. Group Policy is a hierarchical infrastructure which allows systems administrators to configure computer and user settings from a central.

1.1 Microsoft® Windows® 2003 Server Group Policy Management Prof. Abdul Hameed.

Introduction to Group Policy Lesson 7. Group Policy Group Policy is a method of controlling settings across your network. – Group Policy consists of user.

Planning a Group Policy Management and Implementation Strategy

Introduction to Group Policy

Presentation transcript:

© Wiley Inc All Rights Reserved. MCSE: Windows Server 2003 Active Directory Planning, Implementation, and Maintenance Study Guide, Second Edition (70-294) Chapter 8: Planning, Implementing, and Managing Group Policy

Group Policies 2 © Wiley Inc All Rights Reserved. Replace System Policies that existed in previous versions Designed to allow system administrators to customize end user settings and place restrictions on the types of actions that users can perform

Group Policy Settings 3 © Wiley Inc All Rights Reserved. Based on administrative templates Typically three different setting options: –Enabled –Disabled –Not configured

Main Types of Setting Options 4 © Wiley Inc All Rights Reserved. Software settings Windows settings Administrative templates

Group Policy Objects 5 © Wiley Inc All Rights Reserved. Can hold Group Policies; act as containers for the settings made within Group Policy files Settings can be applied at three different levels: –Sites –Domains –Organizational Units

Inheritance Options 6 © Wiley Inc All Rights Reserved. Block Policy Inheritance – settings for an object are not inherited from its parents Force Policy Inheritance – all lower- level objects inherit these settings

Planning a Group Policy Strategy 7 © Wiley Inc All Rights Reserved. The overall goal is to reduce complexity, while still meeting the needs of your users By implementing a logical and consistent set of policies, you’ll be prepared to troubleshoot any problems that arise and to adapt to changing requirements

Tools for Creating GPOs 8 © Wiley Inc All Rights Reserved. Local Security Policy Domain Security Policy Domain Controller Security Policy Active Directory Sites and Services Active Directory Users and Computers MMC Group Policy snap-in

Linking GPOs 9 © Wiley Inc All Rights Reserved. After creation, the GPO must be linked to a specific Active Directory object GPOs can be linked to: –Sites –Domains –OUs

Default Administrative Templates 10 © Wiley Inc All Rights Reserved. Common.adm Conf.adm Inetcorp.adm Inetres.adm Inetset.adm System.adm Windows.adm Winnt.adm Wmplayer.adm Wuau.adm

GPO Security Settings 11 © Wiley Inc All Rights Reserved. Full Control Read Write Create All Child Objects Delete All Child Objects Apply Group Policy

Delegating Administrative Control of GPOs 12 © Wiley Inc All Rights Reserved. Can be done with the Delegation of Control Wizard Allows you to grant appropriate permissions

Script Policies 13 © Wiley Inc All Rights Reserved. Specific options that are part of Group Policy settings for users and computers Created using the Windows Script Host (WSH) or batch file commands Two main areas: –Startup/Shutdown scripts –Logon/Logoff scripts

Network Configuration Settings 14 © Wiley Inc All Rights Reserved. Computer Network options User Network options

Microsoft’s PKI Implementation 15 © Wiley Inc All Rights Reserved. Certificate Authorities (CAs) Certificate publishers PKI-savvy applications Certificate templates

Folder Redirection 16 © Wiley Inc All Rights Reserved. Can be useful when data must always be available regardless of where user logs on Can be done with two options: –Basic –Advanced

RSoP 17 © Wiley Inc All Rights Reserved. Resultant Set of Policy runs in two modes: –Logging mode –Planning mode Command-line grpresult.exe will take a snapshot of the settings that currently apply

Gpresult Switches 18 © Wiley Inc All Rights Reserved. /S = generates RSoP for remote computer /USER = generates RSoP for remote user /V = verbose mode /Z = more verbose /SCOPE MACHINE = displays maximum machine information /SCOPE USER = displays maximum user information