1. Understanding Group Policy on Windows Server 2003

2. What we will cover:  Group Policy Concepts  Linking and Order of Precedence  Group Policy Management Console

3. Prerequisite Knowledge  Experience supporting Microsoft networks  Familiarity with the Windows server user interface  Understanding of Active Directory concepts

4. Agenda  Windows Server 2003 Group Policy Concepts  Linking and Order of Precedence  Group Policy Management Console

5. Windows Server 2003 Group Policy Group Policy Concepts  Used to manage users and computers  Deploys Policy through Active Directory  Applied at site, domain, and OU levels  Group Policy is highly flexible  Registry-based policy settings  Security settings  Software installation  User Environment control  Internet Explorer maintenance

6. Windows Server 2003 Group Policy Group Policy Capabilities  Folder redirection  Software restriction  Desktop configuration  Control of Windows applications

7. Agenda  Windows Server 2003 Group Policy Concepts  Linking and Order of Precedence  Group Policy Management Console

8. Windows Server 2003 Group Policy Group Policy Order of Precedence Local Security Policy Site Policy Domain Policy Parent OU Policy Child OU Policy

9. Windows Server 2003 Group Policy Group Policy Objects and Links  GPOs contain policy settings  Links define what objects the GPO will target  Scope of Management  Sites, Domains, OU, OU, etc.  Group Policy Management Console  Better illustrates the relationship between GPOs and Links

10. Agenda  Windows Server 2003 Group Policy Concepts  Linking and Order of Precedence  Group Policy Management Console

11. Windows Server 2003 Group Policy Group Policy Management Console

12. Windows Server 2003 Group Policy Administrative Template Extension  Used by Group Policy to configure settings in a Group Policy Object  Server Side Snap-in  Loads in Group Policy Object Editor  ADM files  Client-Side Extension  Writes policy settings that update registry keys on target client computers

13. Windows Server 2003 Group Policy ADM Files  Enables configuration of policy settings  Do not actually contain policy settings  Policy settings are contained registry.pol  Windows Server 2003 contains:  System.adm  Inetres.adm  Conf.adm  Wmplayer.adm  Wuau.adm  Location of ADM files

14. Windows Server 2003 Group Policy ADM Files  Enables configuration of policy settings  Do not actually contain policy settings  Policy settings are contained registry.pol  Windows Server 2003 contains:  System.adm  Inetres.adm  Conf.adm  Wmplayer.adm  Wuau.adm  Location of ADM files

15. Windows Server 2003 Group Policy ADM Files Walkthrough

16. Windows Server 2003 Group Policy Registry.pol Files Walkthrough

17. Windows Server 2003 Group Policy Group Policy Concepts and the GPMC Editing Group Policy Objects Creating and Managing Group Policies demonstration demonstration

18. Session Summary  Group Policy allows you to manage and control your environment more easily  Use the new GPMC to manage GPO’s and Security Policies