Module 15: Manage the Windows ® Small Business Server 2008 Environment Using Group Policy

Module 15: Manage the Windows Small Business Server 2008 Environment Using Group Policy Administering the Windows Small Business Server 2008 Network Using Group Policy Managing Group Policies in the GPMC Auditing Security Events Deploying Software Using Group Policy Management Troubleshooting Group Policy in Windows Server 2008

Lesson 1: Administering the Windows SBS 2008 Network Using Group Policy Administer Group Policies in a Windows Small Business Server (SBS) 2008 environment.

What is Group Policy? Works with Microsoft Windows ® 2000 and later versions Enforces IT policies Simplifies administrative tasks Implements a standard computing environment Implements security settings Group Policy

Terminology Group Policy Management Console (GPMC)Group Policy settingsGroup Policy object editor Site Domain OU Child OU Active Directory ® containers

Common Uses of Group Policy Capabilities Software distributionSoftware restriction Ability to reset the local administrator or any other user password through a policy Ability to control membership in local groups, such as the administrators group, using Group Policy Ability to reset service account passwords within the service itself Security settingsIE maintenance

What’s New in Windows Server ® 2008 Group Policy? New in Windows Server 2008 Group Policy FiltersStarter GPOsCommenting Group Policy preferences *Advanced Group Policy management

Filters Searching and filtering settings in a GPO Basic searching and filtering of titles, explanation text, and comments

Starter GPOs Create baseline settings off-line Copy and create a new GPO Carries over configurations and comments Include it in RSoP analysis A starter GPO allows you to:

Commenting Comment tab Commenting will aid in management and troubleshooting

Group Policy Preferences Located on target computer.dll containing code managing GPO information Client-side extensions (CSE) Group Policy Preferences offer control over a computer that was only possible using scripts or third-party tools in the past

Advanced Group Policy Management Role-based delegation Roll back and roll forward to any GPO in the archive Off-line editing of GPOs Settings difference reports between two GPOs Workflow for GPO management tasks GPO templates for baseline configurations Built on GPMC Integrated change control for your Group Policy management environment Advanced GPO management with AGPM provides the following benefits:

Default GPOs in Small Business Server 2008 Group Policy Objects in Small Business Server 2008

Active Directory and Group Policies Active Directory Users and Groups Group Policy Management Console Group Policy Management Console

Lesson 2: Managing Group Policies in the GPMC Configure Group Policies using the GPMC.

Group Policy Management Console (GPMC) A unified graphical user interface (GUI) that makes Group Policy much easier to use Backup/restore of Group Policy objects (GPOs) Import/export and copy/paste of GPOs and Windows Management Instrumentation (WMI) filters Simplified management of Group Policy–related security HTML reporting for GPO settings and Resultant Set of Policy (RSoP) data Scripting of Group Policy-related tasks that are exposed within this tool (not scripting of settings within a GPO) Key features delivered via GPMC include:

Demonstration: Configure Group Policies In this demonstration you will learn how to configure and administer group policies, including: Creating a group policy Linking a group policy Editing a group policy Deleting a group policy Enforcing a group policy Disabling a group policy Creating a resultant set of policy

Lesson 3: Auditing Security Events Configure object auditing using Group Policy.

Tracking Events Using Audit Policy Audit account log-on events Audit account management Audit directory service access Audit log-on events Audit object access Audit policy change Audit privilege use Audit process tracking Audit system events Audit policy settings

Enable Auditing on a Folder Object Auditing Object Access

Demonstration: Enable Auditing In this demonstration you will learn how to enable audit settings for object access.

Lesson 4: Deploying Software Using Group Policy Management Configure software applications for deployment using Group Policy.

Software Settings User accounts Computer accounts Software may be deployed to: Assign or publish Publish Installation package

Using Group Policy Ensure installation package is located in a shared folder that it may be accessed using a UNC path, such as \\Server1\Apps\app1.msi. Deploying software using Group Policy User configuration Computer configuration

Demonstration: Creating Installation Packages In this demonstration you will learn how to create an installation package for Group Policy deployment.

Lesson 5: Troubleshooting Group Policy in Windows Server 2008 Troubleshooting GPOs.

Troubleshooting Tools GPLogViewGPMC Dcgpofix. exe GPMonitor. exe GPResultGPUpdateGPOTool Troubleshoot GPO

Common GPO Issues DNS-related issues Group Policy processing Foreground- only GPO processing Network issues Time synchronization issues PDC Emulator not available

Lab: Manage Group Policies Exercise 1: Creating and Managing GPOs Exercise 2: Tracking Security Events Exercise 3: Modify Account Policies Exercise 4: Deploy Software Using GPOs Logon information Virtual machine SBS 2008 Server Vista Office User nameGregory Password Pa$$w0rd Estimated time: 60 minutes

Lab Scenario Being the administrator of A.Datum, you are asked to enable auditing on some of the critical company folders. The company would also like to have users’ desktops managed, standardize desktops, and lock down desktop users’ rights. You have received a new software package that needs to be deployed in the most cost-effective and efficient manner.

Lab Review How is a GPO linked to a domain or OU? What parts of a GPO are not backed up? What steps are involved in order to audit an object? Where can auditing information be reviewed? What permissions should users and groups have on an administrative share when using Group Policy to deploy software?

Module Summary In this module you have learned to: Administer the Windows Small Business Server 2008 Network using Group Policy. Manage group policies in the GPMC. Audit security events. Deploy software using Group Policy Management. Troubleshoot Group Policy in Windows Server 2008.

Module Review and Takeaways Review Questions Common Issues and Troubleshooting Tips Real-world Issues and Scenarios Best Practices Tools

Course Evaluation