Group Policy
the Domain in AD
Default Domain Policy GPOs are created and linked to what?
Yes it will be applied
If two GPOs are applied to an object and a setting is configed on one GPO but not the other, will the configuration be applied
1. Local Policies 2. Site-linked GPOs 3. Domain-linked GPOs 4. OU-linked GPOs ..... The last policy applied takes precedence over policies applied earlier
Policies are applied in this order?(4) also which takes over?
True
T/F GPO inheritance is enabled by default
False. Though not advisable to do so.
T/F You can't make changes to default domain policy
-Blocking inheritance -Enforcing inheritance
What are 2 ways to affect GPO inheritance?
-createrd in GP managment console -linked to AD containers
What are GPOs created in and what are they linked to?
-Software Settings (install and manage software) -Window Settings (Key window settings) -Administrative templates (Registry Settings)
What are the 3 major classes of GP edits?
-Control Panel -Network -Printers -Server -Start Menu and Taskbar -System -Windows Components
What are the 7 Administrative templates under computer configuration
-Computer Configuration -User Configuration
What are the two categories of GP configuration settings
-Local GPOs: Stored on local computers are edited in the editor snap in -Domain GPOs: Stored in AD on domain controllers
What are the two types of GPOs?
Dependant on version of windows running. (only after 98)
What causes limitations in Group Policy
-Policy follows a user wherever he or she logs on. -focused on user enviroment and features.
What do policies under user configuration nodes do?
Prevents GPOs linked to a parent containers from affecting child containers(should be used sparingly)
What does blocking GPO inheritance do?
Overrides any conflicting configuration at a deeper level.
What does enforcing GPO inheritance do?
GPOS at a higher level take precedent.
What happens if multiple GPOs are enforced?
Changes in policy will take effect as soon as clients download them
What happens if you edit a GPO that is already linked to a container?
-Applied to Domain Controllers OU (Organizational Unit) -Applicable to all domain controllers in a domain as long as they are members of the OU
What happens with Default Domain Controllers Policy GPO(2 things)
Set of rules that help administrators manage users and computers.
What is Group Policy?
ensures all domain controllers have a copy of the GPO
What is Replication?
Scope of GP defines which users and computers are affected by it
What is Scope and Inheritance?
an object containing policy settings affecting user and computers in enviroments/security (can be local or AD)
What is a GPO?
Create a new GPO and link it to the domain
What is the best way to change policies?
Create GPOs that focus on a category of settings (example, control panel settings)
What is the best way to create a GPO (efficiency/organizational wise)
-Group Policy Management Console(GPMC) -Group Policy Management Editor (GPME)
What primary editing tools are there for GPOs?
b. Individually
You should test group policies a. Multiple at once b. Individually
Users and Computers
who do GPOs only apply to?
