1. Implementing Group Policy

2. Overview What is Group Policy Introduction to Group Policy Group Policy Structure How Group Policy Settings Are Applied in Active Directory Monitoring and Troubleshooting Group Policy Best Practices

3. What is Group Policy Group Policy is a technology that supports the configuration of computers (both clients and servers) and users in an Active Directory environment. Group Policy supports a one-to-many configuration of areas such as security settings, operating system and application components, Internet Explorer maintenance, software distribution, and more. Through the creation of Group Policy Objects (GPOs), administrators can target groups of users and computers to which specific settings can be applied. The result is a more consistent environment and the potential for IT cost reduction.

4. What are the Operating System requirements for Group Policy? Domain-based Group Policy requires an Active Directory domain (Windows 2000 or Windows Server 2003) and can be used to manage Windows 2000, Windows XP Professional, and Windows Server 2003 operating systems.

5. Introduction to Group Policy Group Policy Enables You to: Set centralized (Top Level) and decentralized policies (Department and OU Level) Ensure users have their required environments Lower total cost of ownership by controlling user and computer environments Enforce Written policies- As a reminder when you logon to this computer you are bound by the Acceptable Use Policy. If you have any questions please contact…. Site Domain OU Windows 2000 Applies Continually Users Computers Administrator Sets Group Policy Once Group Policy

6.  Group Policy Structure Types of Group Policy Settings Group Policy Settings for Computers and Users

7. Some Types of Group Policy Settings Types of Group Policy Settings Administrative Templates Administrative Templates Registry-based Group Policy settings Software Installation Settings for central management of software installation Scripts Startup, shutdown, logon, and logoff scripts Folder Redirection Settings for storing of users’ folders on a network server Internet Explorer Settings to administer and customize Microsoft Internet Explorer on Windows 2000–based computers- Such as pre-populating favorites for all users Let’s take a look

8. Group Policy Settings for Computers and Users Group Policy Settings for Computers: Specify operating system behavior, desktop behavior, security settings, computer startup and shutdown scripts, computer-assigned application options, and application settings Apply when the operating system initializes Group Policy Settings for Users: Specify operating system behavior, desktop settings, security settings, assigned and published application options, application settings, folder redirection options, and user logon and logoff scripts Apply when users log on to the computer and during the periodic refresh cycle Users Computers

9. How Group Policy Settings Are Applied in Active Directory Group Policy Inheritance Resolving Conflicts Between Group Policy Settings Class Discussion: How Group Policy Is Applied

10. Group Policy Inheritance Windows 2000 Applies GPO Settings in a Specific Order Site Domain OU Child Containers Inherit GPO Settings from Parent Containers Police Fire All Users Town.Belmont.Ma.Us Domain GPO

11. Resolving Conflicts Between Group Policy Settings All Group Policy Settings Apply Unless There Are Conflicts The Last Setting Processed Applies When settings from different GPOs in the Active Directory hierarchy conflict, the child container GPO settings apply

12. Class Discussion: How Group Policy Is Applied GPO1 ensures that Favorites appears on the Start menu GPO2 and GPO3 require a password of 11 characters and remove the Windows Update icon GPO4 removes Favorites from the Start menu and adds the Windows Update icon GPO1 ensures that Favorites appears on the Start menu GPO2 and GPO3 require a password of 11 characters and remove the Windows Update icon GPO4 removes Favorites from the Start menu and adds the Windows Update icon What are the resultant Group Policy settings for the OU? OU Site Domain GPO1 GPO2 GPO3 GPO4

13. Class Discussion: How Group Policy Is Applied (2) What are the resultant Group Policy settings for the OU? A password must be at least 11 characters long The Windows Update icon appears on the Start menu Favorites does not appear on the Start menu A password must be at least 11 characters long The Windows Update icon appears on the Start menu Favorites does not appear on the Start menu OU Site Domain GPO1 GPO2 GPO3 GPO4

14.  Monitoring and Troubleshooting Group Policy Monitoring Group Policy Group Policy Troubleshooting Tools Troubleshooting Group Policy What group policy settings are available

15. Group Policy Troubleshooting Tools Windows 2000 Support Tools for Group Policy Troubleshooting: Netdiag.exe – Network Connectivity issues Windows 2000 Resource Kit Tools for Group Policy Troubleshooting: Gpresult.exe – status of GPO on a client- DEMO

16. Best Practices Limit the Number of GPOs That Affect Any Computer or User Group Related Settings in a Single GPO Plan and Test GPOs Before You Implement Them

17. Review Introduction to Group Policy Group Policy Structure How Group Policy Settings Are Applied in Active Directory Modifying Group Policy Inheritance Monitoring and Troubleshooting Group Policy Best Practices