Module 8: Implementing Group Policy

Overview Multimedia: Introduction to Group Policy Implementing Group Policy Objects Implementing GPOs on a Domain Managing the Deployment of Group Policy

Multimedia: Introduction to Group Policy This presentation introduces the role of Group Policy in managing the user and computer environments Domain OU Site GPO

Lesson: Implementing Group Policy Objects What Is Group Policy? What Are User and Computer Configuration Settings? How to Set Local Computer Policy Settings

What Is Group Policy?

Group Policy settings for users:  Desktop settings  Software settings  Windows settings  Security settings Group Policy settings for computers:  Desktop behavior  Software settings  Windows settings  Security settings What Are User and Computer Configuration Settings?

How to Set Local Computer Policy Settings Your instructor will demonstrate how to set a local computer policy setting

Practice: Setting Local Computer Policy Settings

Lesson: Implementing GPOs on a Domain Tools Used to Create GPOs What Is GPO Management on a Domain? How to Create a GPO What Is a GPO Link? How to Create a GPO Link How Group Policy Permission Is Inherited in Active Directory

Tools Used to Create GPOs Default Group Policy tools  Active Directory Users and Computers Domain and organizational unit GPOs  Active Directory Sites and Services Site GPOs  Local Security Policy Local computer security settings Add-in tools  Group Policy Management Domain, organizational unit, and site GPOs

What Is GPO Management on a Domain?

How to Create a GPO Your instructor will demonstrate how to create a GPO

Practice: Creating a GPO In this practice, you will create a GPO by using Group Policy Management

What Is a GPO Link? Organizational Unit GPO Site GPO Domain GPO Site Domain OU

How to Create a GPO Link Your instructor will demonstrate how to create a GPO link

How Group Policy Permission Is Inherited in Active Directory Domain OU User or Computer Accounts OU GPO 1 OU GPO 3 OU GPO 2

Practice: Creating a GPO Link In this practice, you will create a GPO link

Lesson: Managing the Deployment of Group Policy What Happens When GPOs Conflict Blocking the Deployment of a GPO How to Block the deployment of a GPO Attributes of a GPO Link How to Configure Group Policy Enforcement Filtering the Deployment of a GPO How to Configure Group Policy Filtering

What Happens When GPOs Conflict How conflicts are resolved  When Group Policy settings in the Active Directory hierarchy conflict, the settings for the child container GPO apply Options for modifying inheritance  No Override  Block Policy inheritance

Blocking the Deployment of a GPO Sales Production Domain GPOs No GPO settings apply

How to Block the Deployment of a GPO Your instructor will demonstrate how to block the deployment of a GPO

Attributes of a GPO Link Enforced Conflicting Links

How to Configure Group Policy Enforcement

Filtering the Deployment of a GPO Sales Production Domain Mengph Kimyo Group Apply Group Policy Deny Read and Apply Group Policy Allow GPO

Class Discussion: Modifying Group Policy Inheritance How do you set up your GPOs? Payroll Sales Contoso.msft Training Requirements An antivirus application must be installed on all computers in the domain The Office suite must be installed on all computers in the domain, except for those in the Payroll department An accounting application must be installed on all client computers in the Payroll department, except those used by the Payroll administrators An antivirus application must be installed on all computers in the domain The Office suite must be installed on all computers in the domain, except for those in the Payroll department An accounting application must be installed on all client computers in the Payroll department, except those used by the Payroll administrators

How to Configure Group Policy Filtering Your instructor will demonstrate how to configure Group Policy filtering

Practice: Managing the Deployment of Group Policy City Standard Desktop City Standard Desktop City Accounting Apps City Accounting Apps City Marketing Apps City Marketing Apps CityName IT Test Domain Accounting Employees Marketing Employees Temp Employees

Lab A: Implementing Group Policy In this lab, you will:  Link a GPO to an organizational unit  Identify the effects of inheritance when multiple GPOs are assigned  Block Group Policy inheritance  Force a GPO to be applied to child organizational units  Filter a GPO so that it is applied to selected users and groups in an organizational unit

Course Evaluation