70-742 MOAC Lesson 8 Configuring Group Policy Processing

To run WMI Filtering you need?

-Domain controller running Windows 2003 or Later -Computer running Windows XP Pro or later -Windows Server 2003 or later -Filter criteria must have an outcome of true for GPO -One WMI filter per GPO

What are the exceptions to the processing of group polices?

Block policy Inheritance , Enforce Option

inheritance

By default, a group policy uses inheritance in which settings are inherited from the container above.

When are computer setting applied?

During startup

How do you manually Refresh a Group policy?

GPUpdate

To assign a group policy, active directory is linked to what?

Sites, Domains and OUs

Result Set of Policy (RSoP)

The actual policies that are applied to a computer and the user who logs on to that computer.

Replace mode

The user settings defined in the computer's GPO replace the user settings normally applied to the user. This mode is useful in a situation such as a kiosk, classroom, or public library, where users should receive a standard configuration.

Merge mode

The user settings defined in the computer's GPOs and user settings normally applied to the user are combined. If the settings conflict, the user settings in the computer's GPO take precedence over the user's normal settings. This mode is useful to apply additional settings to users' typical configurations, such as mapping additional printers, replacing the wallpaper on a computer, or disabling certain applications or devices in a conference room or reception area..

loopback processing

Used to assign user policies to computer objects. Therefore, no matter who logs on to a computer, the user policies are applied to the computer

What configures a GPO to be applied to certain users or computers based on specific hardware, software, operating systems, and services?

WMI Filtering

Default Domain Controller Policy

When Active Directory is installed, two domain GPOs are created by default. This policy is linked to the Domain Controllers organizational unit, which then affects the domain controllers. It contains the default user rights assignments.

Default Domain Policy

When Active Directory is installed, two domain GPOs are created by default. This policy is linked to the domain. It affects all users and computers in the domain, including domain controllers. It specifies the password, account lockout, and Kerberos policies. These policies can be configured only at the domain level.

What is a component that extends the Windows Driver Model to provide an interface to the operating system to provide information and notification on hardware, software, operating systems, and services?

Windows Management Instrumentation (WMI

Windows Management Instrumentation (WMI)

a component that extends the Windows Driver Model to provide an interface to the operating system to provide information and notification on hardware, software, operating systems, and services.

WMI filtering

configures a GPO to be applied to certain users or computers based on specific hardware, software, operating systems, and services.

security group filtering

specifies which users, computers, or groups based on ACLs receive a GPO.

Which filtering specifies which users, computers, or groups based on ACLs receive a GPO?

Security Group Filtering

What filters can be used to give you granular control of whom or what receives group policy?

Security Group Filtering and WMI Filtering

client-side extensions (CSEs)

Group policies are client driven, which means that the Group Policy client pulls the GPOs from the domain, which triggers processes called client-side extensions (CSEs) that interrupt the settings in a GPO and make the changes to the local computer or the currently logged-on user.

What can be ran to help you analyze the cumulative effect of GPOs and policy settings on a user or computer in your organization?

Group policy result wizard

What order are GPOs processed?

LSDO: Local Group Policy, Site, Domain, OU