Module 5: Implementing Group Policy

Overview Creating and Configuring GPOs Configuring Group Policy Refresh Rates and Group Policy Settings Managing GPOs Verifying and Troubleshooting Group Policy Delegating Administrative Control of Group Policy Planning a Group Policy Strategy for the Enterprise

Lesson: Creating and Configuring GPOs Multimedia: Review of Group Policy GPO Components Why Specify a Domain Controller for Managing GPOs? How to Specify a Domain Controller for Managing GPOs What Are WMI Filters? How to Filter Group Policy Settings Using WMI Filters What Is Loopback Processing? How to Configure the User Group Policy Loopback Processing Mode

Multimedia: Review of Group Policy Site Domain OU GPO1 GPO2 GPO3 GPO4

Group Policy Container GPO Components Contains Group Policy settings Stores content in two locations Group Policy Object Stored in shared SYSVOL folder Provides Group Policy settings Group Policy Template Stored in Active Directory Provides version information Group Policy Container

Why Specify a Domain Controller for Managing GPOs? Choose a domain controller to avoid replication conflicts Options

How to Specify a Domain Controller for Managing GPOs Your instructor will demonstrate how to specify a domain controller to use for domain and site operations

What Are WMI Filters? WMI Filter 10 GB 400 MB 35 GB 750 MB Install Office XP? 500 MB free disk space? WMI Filter Administrator GPO 10 GB 400 MB 35 GB 750 MB

How to Filter Group Policy Settings Using WMI Filters Your instructor will demonstrate how to create a WMI filter and link it to a GPO

What Is Loopback Processing?

How to Configure the User Group Policy Loopback Processing Mode Your instructor will demonstrate how to configure the User Group Policy Loopback Processing Mode

Practice: Creating and Configuring GPOs In this practice, you will: Install the Group Policy Management console Create and configure GPOs

Lesson: Configuring Group Policy Refresh Rates and Group Policy Settings When Is Group Policy Applied? How to Assign Group Policy Script Settings How to Configure Refresh Rates for Group Policy Components How to Configure Refresh Rates for Domain Controllers and Computers How to Refresh the Group Policy Settings on a User’s Computer Using Gpupdate.exe

When Is Group Policy Applied? Computer starts Computer settings applied Startup scripts run Refresh Interval User logs on User settings applied Logon scripts run Refresh Interval

How to Assign Group Policy Script Settings Your instructor will demonstrate how to: Copy a script Add the script

How to Configure Refresh Rates for Group Policy Components Your instructor will demonstrate how to configure refresh rates for Group Policy components

How to Configure Refresh Rates for Domain Controllers and Computers Your instructor will demonstrate how to configure refresh rates for domain controllers and computers

How to Refresh the Group Policy Settings on a User’s Computer Using Gpupdate.exe Your instructor will demonstrate how to refresh the Group Policy settings on a user’s computer by using Gpupdate.exe

Practice: Configuring Group Policy Refresh Rates and Group Policy Settings In this practice, you will: Configure the Group Policy refresh interval for the client computers Configure Group Policy settings for synchronizing offline files

Lesson: Managing GPOs What Is a Copy Operation? How to Copy a GPO What Is a Backup Operation? How to Back Up a GPO What Is a Restore Operation? How to Restore a GPO What Is an Import Operation? How to Import Settings into a GPO

What Is a Copy Operation? DACL User 1 GPO1 Read Full Control GPO2 Copy Operation A copy of a GPO transfers only the settings within a GPO The new GPO is created unlinked

How to Copy a GPO Your instructor will demonstrate how to copy a GPO

What Is a Backup Operation? GPO1 Backup Operation GPO1 Backup of a GPO In a backup operation, Group Policy Management export all data in the GPO to the selected file and saves the GPT files

How to Back Up a GPO Your instructor will demonstrate how to back up a GPO

What Is a Restore Operation? GPO1 GPO1 Backed-up GPO In a restore operation, the contents of the GPO are returned to exactly the same state

How to Restore a GPO Your instructor will demonstrate how to: Restore a previous version of an existing GPO Restore a deleted GPO that appears in the list of GPOs

What Is an Import Operation? GPO1 GPO2 GPO Settings In an import operation, all GPO settings are copied from the source to the target GPO

How to Import Settings into a GPO Your instructor will demonstrate how to import settings into a GPO

Practice: Managing GPOs In this practice, you will: Copy a GPO Back up the GPO Delete the backed-up GPO Restore the deleted GPO

Lesson: Verifying and Troubleshooting Group Policy Common Problems with Implementing Group Policy How to Verify Group Policy Settings Using Group Policy Modeling Wizard How to Verify Group Policy Settings Using Group Policy Results

Common Problems with Implementing Group Policy Symptom Cause Cannot open a GPO Read and Write permissions for the GPO are not assigned Cannot edit a GPO A networking problem Cannot apply Group Policy on a security group GPOs are not applied to security groups No effect of Group Policy on a site, domain, or organizational unit Group Policy settings are not configured correctly No effect of Group Policy in an Active Directory container GPOs cannot be linked to Active Directory containers No effect of Group Policy on a client computer A non-local GPO can overwrite local policies

How to Verify Group Policy Settings Using the Group Policy Modeling Wizard Your instructor will demonstrate how to: Create a new Group Policy Modeling query View the query

How to Verify Group Policy Settings Using Group Policy Results Your instructor will demonstrate how to: Create a new Group Policy Results query View the query

Practice: Verifying and Troubleshooting Group Policy In this practice, you will verify Group Policy settings by using Group Policy Modeling

Lesson: Delegating Administrative Control of Group Policy Delegation of GPOs Delegation of Group Policy for a Site, Domain, or Organizational Unit Delegation of WMI Filters How to Delegate Administrative Control for Managing Group Policy Links How to Delegate Administrative Control for Creating and Editing GPOs

Delegation of GPOs Methods to assign permission to create GPOs Allows users to only create GPOs in the domain Allows users to edit or delete GPOs or link GPO Add the group or user to the Group Policy Creator Owners group Explicitly assign the group or user permission to create GPOs

Delegation of Group Policy for a Site, Domain, or Organizational Unit Permissions: Read and Write permissions to the gPLinks and gPOptions attributes Link GPOs Generate Resultant Set of Policy (Planning) permission Group Policy Modeling Generate Resultant Set of Policy (Logging) permission Group Policy Results

Delegation of WMI Filters Payroll Administrator Corporate Administrator WMI Filter Creation To create a WMI filter, use these permissions: Create Owner Full Control Delegation To delegate a WMI filter, assign these permissions: Edit

How to Delegate Administrative Control for Managing Group Policy Links Your instructor will demonstrate how to delegate administrative control for managing Group Policy links

How to Delegate Administrative Control for Creating and Editing GPOs Your instructor will demonstrate how to delegate administrative control for: Creating GPOs Editing GPOs

Practice: Delegating Administrative Control of Group Policy In this practice, you will: Add an account to the Group Policy Creator Owners group Delegate the ability to manage Group Policy links

Lesson: Planning a Group Policy Strategy for the Enterprise Guidelines for Planning GPOs Guidelines for Determining GPO Inheritance Guidelines for Determining a Group Policy Strategy for Sites Guidelines for Planning the Administration of GPOs Guidelines for Deploying GPOs

Guidelines for Planning GPOs Apply GPO settings at the highest level Reduce the number of GPOs Create specialized GPOs Disable computer or user configuration settings

Guidelines for Determining GPO Inheritance Use the Enforced option only when required Use Block Inheritance sparingly Use security filtering only when necessary

Guidelines for Determining a Group Policy Strategy for Sites Apply a GPO to a site only when the settings are specific to the site and not to the domain Create GPOs in the domain that has the most domain controllers in that site

Guidelines for Planning the Administration of GPOs Identify your strategy for managing GPOs Organize GPOs according to administrative maintenance Plan the auditing of GPOs

Guidelines for Deploying GPOs Test Group Policy settings Document the Group Policy plan

Practice: Planning a Group Policy Strategy for the Enterprise In this practice, you will: Determine the effects of Group Policy settings Manage deployment of Group Policy

Lab A: Implementing Group Policy Creating and Configuring GPOs Linking GPOs Verifying Group Policy Settings