1. Module 6 Creating and Configuring Group Policy

2. Module Overview Overview of Group Policy Configuring the Scope of Group Policy Objects Evaluating the Application of Group Policy Objects Managing Group Policy Objects Delegating Administrative Control of Group Policy

3. How Group Policy Is Applied Computer starts Computer settings applied Startup scripts run Refresh Interval: Every 90 minutes User logs on User settings applied Logon scripts run Refresh Interval: Every 90 minutes

4. Exceptions to Group Policy Processing Additional exceptions: Windows XP and Windows Vista use cached credential for faster logons Many GPO settings take two logons to take effect Cached credentials 500 kilobits per second (kbps) by default Certain client side extensions are not processed Prior to Windows Vista, ICMP is used to detect a slow link Windows Vista uses Network Location Awareness Slow links Remote access connections Moving a user or computer object in AD DS

5. Group Policy Components Group Policy Object Stored in AD DS Provides version information Group Policy Container Stored in shared SYSVOL folder Provides Group Policy settings Supports both ADM and ADMX templates Group Policy Template Contains Group Policy settings Stores content in two locations

6. What Are ADM and ADMX Files? ADM files are : Copied into every GPO in SYSVOL Difficult to customize ADMX files are : Language neutral Not stored in the GPO Extensible through XML

7. What Is the Central Store? The Central Store : Is a central repository for ADMX and ADML files Is stored in SYSVOL Must be created manually Is detected automatically by Windows Vista or Windows Server 2008 Windows Vista or Windows Server 2008 workstation Windows Vista or Windows Server 2008 workstation ADMX files Domain controller with SYSVOL Domain controller with SYSVOL Domain controller with SYSVOL Domain controller with SYSVOL

8. Group Policy Processing Order Site Domain OU GPO2 GPO3 GPO4 GPO5 GPO1 Local group

9. What Are Multiple Local Group Policy Objects? One layer of computer configurations that applies to all users Layers apply only to individual users, not to groups There are three layers of user configurations: Administrator Non-Administrator User-specific

10. Options for Modifying Group Policy Processing Five methods to modify GPO default processing: Block inheritance Enforcement Filtering using security groups or WMI filters Disabling GPOs Loopback processing

11. How Does Loopback Processing Work?

12. What Is Group Policy Reporting? Group Policy results are provided by the GPMC GPResult is a command line utility Group Policy reporting is a method of planning and troubleshooting Group Policy

13. What Is Group Policy Modeling? The Group Policy Modeling Wizard simulates: Site membership Security group membership WMI filters Slow links Loopback processing The effects of moving user or computer objects to a different Active Directory container The Group Policy Modeling Wizard calculates the simulated net effect of GPOs

14. GPO Management Tasks GPO management tasks: Back up GPOs Restore GPOs Copy GPOs Import GPOs

15. What Is a Starter GPO? Stores administrative template settings on which the new GPOs will be based Can be exported to.cab files Can be imported into other areas of the enterprise Exported to cab file starterGPO.cab file Imported to GPMC Load cabinet file

16. The ADMX Migrator utility: Migrating Group Policy Objects Can be used to convert custom ADM files to ADMX Is GUI-based, and can be downloaded from the Microsoft download site utility

17. Options for Delegating Control of GPOs Methods to delegate control of GPOs Create GPOs in the domain Edit or delete GPOs Link GPOs to containers Use reporting tools Membership in Group Policy Creator Owners group or explicit permission to create GPOs Membership in Group Policy Creator Owners group or assign Edit rights to individual policies Membership in Group Policy Creator Owners group or delegate the right to link GPOs to containers Membership in Group Policy Creator Owners group or delegate the right to use Group Policy reporting tools