40 likes | 139 Views
Root Domain. Domain Controller OU. Department OU. Secured XP Users OU. Windows XP OU. Desktop OU. Laptop OU. Establishing an OU Hierarchy for Managing and Securing Clients. Base design on business and IT needs Split hierarchy Separate user and computer OUs
E N D
Root Domain Domain Controller OU Department OU Secured XP Users OU Windows XP OU Desktop OU Laptop OU Establishing an OU Hierarchy for Managing and Securing Clients • Base design on business and IT needs • Split hierarchy • Separate user andcomputer OUs • Simplifies securitymanagement issues • Apply appropriatepolicy settings to each OU
Root Domain Domain Policy Domain Controller OU Department OU Enterprise Client Domain.inf Desktop Policy Enterprise Client Desktop.inf Secured XP Users OU Windows XP OU Desktop OU Secured XP Users Policy Enterprise Client Laptop.inf Laptop Policy Laptop OU How to Apply Security Templates and Administrative Templates
How Software Restriction Works Define policy for domain using Group Policy Editor 1 Policy is downloaded by Group Policy to machine 2 Enforced by operating system when software is run 3
Domain Policy Domain Engineering Domain Member Servers Domain Controllers Member Server Baseline Policy Domain Controller Policy Operations Admin Print Server Policy Print Servers Operations Admin File Server Policy File Servers Web Service Admin IIS Server Policy Web Servers A Role-Based OU Hierarchy • An OU hierarchy based on server roles • Simplifies securitymanagement issues • Applies security policy settings to servers and other objects in each OU