11 CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY Chapter 8

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY2 SECURITY POLICIES

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY3 USER CONFIGURATION NODE SECURITY SETTINGS

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY4 ACCOUNT POLICIES

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY5 PASSWORD POLICY

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY6 ACCOUNT LOCKOUT POLICY

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY7 KERBEROS POLICY

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY8 LOCAL POLICIES

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY9 AUDIT POLICY

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY10 DEFAULT DOMAIN CONTROLLER AUDIT POLICY

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY11 THE CRASHONAUDITFAIL SETTING

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY12 AUDITING BEST PRACTICES AND TIPS  Audit only pertinent items.  Archive security logs to provide a documented history.  Understand the following categories:  System events  Policy change  Account management  Logon event versus account logon event  Configure the size of your security logs carefully.  Audit only pertinent items.  Archive security logs to provide a documented history.  Understand the following categories:  System events  Policy change  Account management  Logon event versus account logon event  Configure the size of your security logs carefully.

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY13 USER RIGHTS ASSIGNMENT

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY14 SECURITY OPTIONS

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY15 EVENT LOG POLICY

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY16 RESTRICTED GROUPS POLICY

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY17 SYSTEM SERVICES POLICY

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY18 REGISTRY POLICY

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY19 FILE SYSTEM POLICY

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY20 WIRELESS NETWORK (IEEE ) POLICIES

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY21 PUBLIC KEY POLICIES

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY22 SOFTWARE RESTRICTION POLICIES

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY23 FOLDER REDIRECTION  Allows you to redirect user folders to a central location  Benefits:  Centralized backup of user files  Centralized access of user files when users change computers  Works with roaming profiles  Allows you to redirect user folders to a central location  Benefits:  Centralized backup of user files  Centralized access of user files when users change computers  Works with roaming profiles

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY24 FOLDER REDIRECTION (continued)

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY25 OFFLINE FILES

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY26 DISK QUOTAS

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY27 REFRESH INTERVALS FOR COMPUTERS

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY28 REFRESH INTERVALS FOR USERS

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY29 MANUALLY REFRESHING GROUP POLICY

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY30 OPTIMIZING GROUP POLICY PROCESSING

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY31 SUMMARY  Most security settings are in the Computer Configuration node of a GPO.  Domain-wide policies should be made in the Default Domain Controllers GPO. Specifically, account policies such as Password, Account Lockout, and Kerberos belong here.  Local policies are processed first and overwritten by all other policies in the hierarchy.  Auditing can be done at any level, but should be configured carefully. Default Domain Controllers Policy has some default auditing configured. Results are posted to the security log in the Event Viewer.  Most security settings are in the Computer Configuration node of a GPO.  Domain-wide policies should be made in the Default Domain Controllers GPO. Specifically, account policies such as Password, Account Lockout, and Kerberos belong here.  Local policies are processed first and overwritten by all other policies in the hierarchy.  Auditing can be done at any level, but should be configured carefully. Default Domain Controllers Policy has some default auditing configured. Results are posted to the security log in the Event Viewer.

Chapter 8: CONFIGURING THE USER AND COMPUTER ENVIRONMENT USING GROUP POLICY32 SUMMARY (continued)  GPOs are refreshed every 90 minutes with a 30- minute offset, except on domain controllers, which refresh GPOs every five minutes.  Disable the unneeded Group Policy portion, either User Settings or Computer Settings.  GPOs are refreshed every 90 minutes with a 30- minute offset, except on domain controllers, which refresh GPOs every five minutes.  Disable the unneeded Group Policy portion, either User Settings or Computer Settings.