Group Policy

the Domain in AD

Default Domain Policy GPOs are created and linked to what?

Yes it will be applied

If two GPOs are applied to an object and a setting is configed on one GPO but not the other, will the configuration be applied

1. Local Policies 2. Site-linked GPOs 3. Domain-linked GPOs 4. OU-linked GPOs ..... The last policy applied takes precedence over policies applied earlier

Policies are applied in this order?(4) also which takes over?

True

T/F GPO inheritance is enabled by default

False. Though not advisable to do so.

T/F You can't make changes to default domain policy

-Blocking inheritance -Enforcing inheritance

What are 2 ways to affect GPO inheritance?

-createrd in GP managment console -linked to AD containers

What are GPOs created in and what are they linked to?

-Software Settings (install and manage software) -Window Settings (Key window settings) -Administrative templates (Registry Settings)

What are the 3 major classes of GP edits?

-Control Panel -Network -Printers -Server -Start Menu and Taskbar -System -Windows Components

What are the 7 Administrative templates under computer configuration

-Computer Configuration -User Configuration

What are the two categories of GP configuration settings

-Local GPOs: Stored on local computers are edited in the editor snap in -Domain GPOs: Stored in AD on domain controllers

What are the two types of GPOs?

Dependant on version of windows running. (only after 98)

What causes limitations in Group Policy

-Policy follows a user wherever he or she logs on. -focused on user enviroment and features.

What do policies under user configuration nodes do?

Prevents GPOs linked to a parent containers from affecting child containers(should be used sparingly)

What does blocking GPO inheritance do?

Overrides any conflicting configuration at a deeper level.

What does enforcing GPO inheritance do?

GPOS at a higher level take precedent.

What happens if multiple GPOs are enforced?

Changes in policy will take effect as soon as clients download them

What happens if you edit a GPO that is already linked to a container?

-Applied to Domain Controllers OU (Organizational Unit) -Applicable to all domain controllers in a domain as long as they are members of the OU

What happens with Default Domain Controllers Policy GPO(2 things)

Set of rules that help administrators manage users and computers.

What is Group Policy?

ensures all domain controllers have a copy of the GPO

What is Replication?

Scope of GP defines which users and computers are affected by it

What is Scope and Inheritance?

an object containing policy settings affecting user and computers in enviroments/security (can be local or AD)

What is a GPO?

Create a new GPO and link it to the domain

What is the best way to change policies?

Create GPOs that focus on a category of settings (example, control panel settings)

What is the best way to create a GPO (efficiency/organizational wise)

-Group Policy Management Console(GPMC) -Group Policy Management Editor (GPME)

What primary editing tools are there for GPOs?

b. Individually

You should test group policies a. Multiple at once b. Individually

Users and Computers

who do GPOs only apply to?