Module 5: Implementing Group Policy

Overview

Creating and Configuring GPOs

Configuring Group Policy Refresh Rates and Group Policy Settings

Managing GPOs

Verifying and Troubleshooting Group Policy

Delegating Administrative Control of Group Policy

Planning a Group Policy Strategy for the Enterprise

Lesson: Creating and Configuring GPOs

Multimedia: Review of Group Policy

GPO Components

Why Specify a Domain Controller for Managing GPOs?

How to Specify a Domain Controller for Managing GPOs

What Are WMI Filters?

How to Filter Group Policy Settings Using WMI Filters

What Is Loopback Processing?

How to Configure the User Group Policy Loopback Processing Mode

Multimedia: Review of Group Policy

Site

Domain

OUOUOUOU

OU

GPO1GPO1

GPO2GPO2

GPO3GPO3

GPO4GPO4

GPO Components

Contains Group Policy settingsStores content in two locations

Group Policy ObjectGroup Policy Object

Stored in shared SYSVOL folder Provides Group Policy settingsStored in shared SYSVOL folder Provides Group Policy settings

Group Policy TemplateGroup Policy Template

Stored in Active DirectoryProvides version informationStored in Active DirectoryProvides version information

Group Policy ContainerGroup Policy Container

Why Specify a Domain Controller for Managing GPOs?

Choose a domain controller to avoid replication conflicts

OptionsOptions

How to Specify a Domain Controller for Managing GPOs

Your instructor will demonstrate how to specify a domain controller to use for domain and site operationsYour instructor will demonstrate how to specify a domain controller to use for domain and site operations

What Are WMI Filters?

500 MB free disk space?

WMI FilterWMI Filter

Administrator

InstallOffice XP?

InstallOffice XP?

10 GB 400 MB 35 GB 750 MB

GPO

How to Filter Group Policy Settings Using WMI Filters

Your instructor will demonstrate how to create a WMI filter and link it to a GPOYour instructor will demonstrate how to create a WMI filter and link it to a GPO

What Is Loopback Processing?

How to Configure the User Group Policy Loopback Processing Mode

Your instructor will demonstrate how to configure the User Group Policy Loopback Processing ModeYour instructor will demonstrate how to configure the User Group Policy Loopback Processing Mode

Practice: Creating and Configuring GPOs

In this practice, you will:

Install the Group Policy Management console

Create and configure GPOs

Lesson: Configuring Group Policy Refresh Rates and Group Policy Settings

When Is Group Policy Applied?

How to Assign Group Policy Script Settings

How to Configure Refresh Rates for Group Policy Components

How to Configure Refresh Rates for Domain Controllers and Computers

How to Refresh the Group Policy Settings on a User’s Computer Using Gpupdate.exe

When Is Group Policy Applied?

Computer startsComputer starts

Computer settings applied

Startup scripts run

Computer settings applied

Startup scripts run

Refresh IntervalRefresh Interval

User logs onUser logs on

User settings applied

Logon scripts run

User settings applied

Logon scripts run

Refresh IntervalRefresh Interval

How to Assign Group Policy Script Settings

Your instructor will demonstrate how to:Your instructor will demonstrate how to:

Copy a script

Add the script

Copy a script

Add the script

How to Configure Refresh Rates for Group Policy Components

Your instructor will demonstrate how to configure refresh rates for Group Policy componentsYour instructor will demonstrate how to configure refresh rates for Group Policy components

How to Configure Refresh Rates for Domain Controllers and Computers

Your instructor will demonstrate how to configure refresh rates for domain controllers and computersYour instructor will demonstrate how to configure refresh rates for domain controllers and computers

How to Refresh the Group Policy Settings on a User’s Computer Using Gpupdate.exe

Your instructor will demonstrate how to refresh the Group Policy settings on a user’s computer by using Gpupdate.exe

Your instructor will demonstrate how to refresh the Group Policy settings on a user’s computer by using Gpupdate.exe

Practice: Configuring Group Policy Refresh Rates and Group Policy Settings

In this practice, you will:

Configure the Group Policy refresh interval for the client computers

Configure Group Policy settings for synchronizing offline files

Lesson: Managing GPOs

What Is a Copy Operation?

How to Copy a GPO

What Is a Backup Operation?

How to Back Up a GPO

What Is a Restore Operation?

How to Restore a GPO

What Is an Import Operation?

How to Import Settings into a GPO

What Is a Copy Operation?

A copy of a GPO transfers only the settings within a GPO

The new GPO is created unlinked

A copy of a GPO transfers only the settings within a GPO

The new GPO is created unlinked

DACLDACL

User 1

GPO1GPO1Read

Full Control

DACLDACL

User 1

GPO2GPO2Read

Full Control

Copy Operation

How to Copy a GPO

Your instructor will demonstrate how to copy a GPOYour instructor will demonstrate how to copy a GPO

What Is a Backup Operation?

In a backup operation, Group Policy Management export all data in the GPO to the selected file and saves the GPT filesIn a backup operation, Group Policy Management export all data in the GPO to the selected file and saves the GPT files

Backup Operation

Backup ofa GPO

Backup ofa GPO

GPO1GPO1

GPO1GPO1

How to Back Up a GPO

Your instructor will demonstrate how to back up a GPOYour instructor will demonstrate how to back up a GPO

What Is a Restore Operation?

In a restore operation, the contents of the GPO are returned to exactly the same stateIn a restore operation, the contents of the GPO are returned to exactly the same state

Restore Operation

GPO1GPO1

Backed-up GPOBacked-up GPO

GPO1GPO1

How to Restore a GPO

Your instructor will demonstrate how to:Your instructor will demonstrate how to:

Restore a previous version of an existing GPO

Restore a deleted GPO that appears in the list of GPOs

Restore a previous version of an existing GPO

Restore a deleted GPO that appears in the list of GPOs

What Is an Import Operation?

In an import operation, all GPO settings are copied from the source to the target GPOIn an import operation, all GPO settings are copied from the source to the target GPO

GPO1GPO1

Import Operation

GPO2GPO2

GPOSettings

GPOSettings

How to Import Settings into a GPO

Your instructor will demonstrate how to import settings into a GPOYour instructor will demonstrate how to import settings into a GPO

Practice: Managing GPOs

In this practice, you will:

Copy a GPO

Back up the GPO

Delete the backed-up GPO

Restore the deleted GPO

Lesson: Verifying and Troubleshooting Group Policy

Common Problems with Implementing Group Policy

How to Verify Group Policy Settings Using Group Policy Modeling Wizard

How to Verify Group Policy Settings Using Group Policy Results

Common Problems with Implementing Group Policy

Symptom Cause

Cannot open a GPO Read and Write permissions for the GPO are not assigned

Cannot edit a GPO A networking problem

Cannot apply Group Policy on a security group

GPOs are not applied to security groups

No effect of Group Policy on a site, domain, or organizational unit

Group Policy settings are not configured correctly

No effect of Group Policy in an Active Directory container

GPOs cannot be linked to Active Directory containers

No effect of Group Policy on a client computer

A non-local GPO can overwrite local policies

How to Verify Group Policy Settings Using the Group Policy Modeling Wizard

Your instructor will demonstrate how to:Your instructor will demonstrate how to:

Create a new Group Policy Modeling query

View the query

Create a new Group Policy Modeling query

View the query

How to Verify Group Policy Settings Using Group Policy Results

Your instructor will demonstrate how to:Your instructor will demonstrate how to:

Create a new Group Policy Results query

View the query

Create a new Group Policy Results query

View the query

Practice: Verifying and Troubleshooting Group Policy

In this practice, you will verify Group Policy settings by using Group Policy Modeling

Lesson: Delegating Administrative Control of Group Policy

Delegation of GPOs

Delegation of Group Policy for a Site, Domain, or Organizational Unit

Delegation of WMI Filters

How to Delegate Administrative Control for Managing Group Policy Links

How to Delegate Administrative Control for Creating and Editing GPOs

Delegation of GPOs

Methods to assign permission to create GPOs

Allows users to only create GPOs in the domain

Allows users to edit or delete GPOs or link GPO

Add the group or user to the Group Policy Creator Owners group

Explicitly assign the group or user permission to create GPOs

Delegation of Group Policy for a Site, Domain, or Organizational Unit

Permissions:Permissions:

Read and Write permissions to the gPLinks and gPOptions attributes

Read and Write permissions to the gPLinks and gPOptions attributes

Link GPOsLink GPOs

Generate Resultant Set of Policy (Logging) permission

Generate Resultant Set of Policy (Logging) permission

Group Policy ResultsGroup Policy Results

Generate Resultant Set of Policy (Planning) permission

Generate Resultant Set of Policy (Planning) permission

Group Policy ModelingGroup Policy Modeling

OU

OU OU

Group PolicyGroup Policy

Site

Domain

Delegation of WMI Filters

Payroll Administrator

CorporateAdministrator

WMI FilterWMI Filter

CreationCreationTo create a WMI filter, use these permissions:To create a WMI filter, use these permissions:

Create Owner

Full Control

Create Owner

Full Control

DelegationDelegationTo delegate a WMI filter, assign these permissions:To delegate a WMI filter, assign these permissions:

Edit

Full Control

Edit

Full Control

How to Delegate Administrative Control for Managing Group Policy Links

Your instructor will demonstrate how to delegate administrative control for managing Group Policy linksYour instructor will demonstrate how to delegate administrative control for managing Group Policy links

How to Delegate Administrative Control for Creating and Editing GPOs

Your instructor will demonstrate how to delegate administrative control for:Your instructor will demonstrate how to delegate administrative control for:

Creating GPOs

Editing GPOs

Creating GPOs

Editing GPOs

Practice: Delegating Administrative Control of Group Policy

In this practice, you will:

Add an account to the Group Policy Creator Owners group

Delegate the ability to manage Group Policy links

Lesson: Planning a Group Policy Strategy for the Enterprise

Guidelines for Planning GPOs

Guidelines for Determining GPO Inheritance

Guidelines for Determining a Group Policy Strategy for Sites

Guidelines for Planning the Administration of GPOs

Guidelines for Deploying GPOs

Guidelines for Planning GPOs

Apply GPO settings at the highest levelApply GPO settings at the highest level

Reduce the number of GPOsReduce the number of GPOs

Create specialized GPOsCreate specialized GPOs

Disable computer or user configuration settingsDisable computer or user configuration settings

Guidelines for Determining GPO Inheritance

Use the Enforced option only when requiredUse the Enforced option only when required

Use Block Inheritance sparinglyUse Block Inheritance sparingly

Use security filtering only when necessaryUse security filtering only when necessary

Guidelines for Determining a Group Policy Strategy for Sites

Apply a GPO to a site only when the settings are specific to the site and not to the domainApply a GPO to a site only when the settings are specific to the site and not to the domain

Create GPOs in the domain that has the most domain controllers in that siteCreate GPOs in the domain that has the most domain controllers in that site

Guidelines for Planning the Administration of GPOs

Identify your strategy for managing GPOsIdentify your strategy for managing GPOs

Organize GPOs according to administrative maintenanceOrganize GPOs according to administrative maintenance

Plan the auditing of GPOsPlan the auditing of GPOs

Guidelines for Deploying GPOs

Test Group Policy settings Test Group Policy settings

Document the Group Policy plan Document the Group Policy plan

Practice: Planning a Group Policy Strategy for the Enterprise

In this practice, you will:

Determine the effects of Group Policy settings

Manage deployment of Group Policy

Lab A: Implementing Group Policy

Creating and Configuring GPOs

Linking GPOs

Verifying Group Policy Settings