1. Group Policy - Part 2 of 3 Rick Claus IT Pro Advisor Microsoft Canada

2. What Will We Cover? Advanced Group Policy management
Deploying software with Group Policy
Group Policy troubleshooting

3. Agenda Implementing Group Policy Deploying Software
Troubleshooting Group Policy

4. Domain-Level Security Settings
Account Policies
Account Policies
Local Policies
Local Policies
IP Security Policies
IP Security Policies
File and Registry ACLs
File and Registry ACLs
Software Restriction Policies
Software Restriction Policies

5. Demo
demonstration
Configuring Domain Policies

6. Software Restriction Policies
Hash Rule
Certificate Rule
Path Rule
Application started
Internet Zone Rule

7. Using Software Restriction Policies
Rule
Type of Rule
Description
Setting 1
Hash rule
Hash of pagefileconfig.vbs
Disallowed 2
Certificate rule
IT management certificate
Unrestricted 3
Path rule
%windir%\system32\*.vbs 4
*.vbs 5
%\windir%
C:\WINDOWS\SYSTEM32\pagefileconfig.vbs
C:\WINDOWS\SYSTEM32\eventquery.vbs
C:\Documents and Settings\ILUVU.txt.vbs
\\LOGIN_SRV\Scripts\CustomerScript1.vbs

8. Demo
demonstration
Software Restriction Policies

9. Managing Desktops Local Folder Shared Network Folder
Elevated privileges

10. Demo
demonstration
Managing Desktops

11. Group Policy Filtering
Security filtering
Refines which users and computers process GPO
WMI filtering
Filter based on attributes of target computer
Best practice: If you deny GPOs to certain users, disable Read access as well.

12. Group Policy Inheritance
Link order
Block inheritance
Enforcement
Link status

13. Demo
demonstration
Group Policy Filtering and Inheritance

14. Agenda Implementing Group Policy Deploying Software
Troubleshooting Group Policy

15. Software Deployment Options
SMS
Approve and distribute critical updates
Targeted software deployment
WSUS
Rich, granular software distribution
Group Policy

16. Group Policy Software Deployment

17. Demo
demonstration
Deploying Software with Group Policy

18. Session Recap Domain-level security settings
Software restriction policies
Group Policy filtering and inheritance
Software deployment with Group Policy

19. Agenda Implementing Group Policy Deploying Software
Troubleshooting Group Policy

20. Use the Troubleshooting Flowchart
Is the setting listed?
Is the GPO in the Denied list?
Yes No
Does Group Policy Results lists the policy as applied?
Yes No
Yes No
1. Inheritance
2. Asynchronous
3. Loopback
1. Replication
2. GP Refresh
3. Slow Link
1. Security Filtering
2. Disabled GPO
3. WMI Filter
1. SOM
2. GP Refresh
3. Network

21. Network and Replication Issues
DNS
SMB and LDAP
Slow Link Connections
Intersite Replication

22. Group Policy Troubleshooting Tools
> GPResult.exe
> GPMonitor.exe
> GPOTool.exe
> ADDiag.exe

23. Demo
demonstration
Troubleshooting Group Policy

24. Session Summary Group Policy is a powerful tool
Deploy software through Group Policy
Several tools are available for troubleshooting Group Policy

25. For More Information Visit TechNet at www.microsoft.ca/technet
Rick Claus
IT Pro Advisor
Microsoft Canada