230 likes | 585 Views
Implementing Group Policy. Overview. What is Group Policy Introduction to Group Policy Group Policy Structure How Group Policy Settings Are Applied in Active Directory Monitoring and Troubleshooting Group Policy Best Practices. What is Group Policy.
E N D
Overview • What is Group Policy • Introduction to Group Policy • Group Policy Structure • How Group Policy Settings Are Applied in Active Directory • Monitoring and Troubleshooting Group Policy • Best Practices
What is Group Policy • Group Policy is a technology that supports the configuration of computers (both clients and servers) and users in an Active Directory environment. • Group Policy supports a one-to-many configuration of areas such as security settings, operating system and application components, Internet Explorer maintenance, software distribution, and more. • Through the creation of Group Policy Objects (GPOs), administrators can target groups of users and computers to which specific settings can be applied. • The result is a more consistent environment and the potential for IT cost reduction.
What are the Operating System requirements for Group Policy? • Domain-based Group Policy requires an Active Directory domain (Windows 2000 or Windows Server 2003) and can be used to manage Windows 2000, Windows XP Professional, and Windows Server 2003 operating systems.
Site Group Policy Domain Users OU Computers Administrator Sets Group Policy Once Windows 2000 Applies Continually Introduction to Group Policy Group Policy Enables You to: • Set centralized (Top Level) and decentralized policies (Department and OU Level) • Ensure users have their required environments • Lower total cost of ownership by controlling user and computer environments • Enforce Written policies- As a reminder when you logon to this computer you are bound by the Acceptable Use Policy. If you have any questions please contact….
Group Policy Structure • Types of Group Policy Settings • Group Policy Settings for Computers and Users
Types of Group Policy Settings Administrative Templates Registry-based Group Policy settings Software Installation Settings for central management of software installation Scripts Startup, shutdown, logon, and logoff scripts Folder Redirection Settings for storing of users’ folders on a network server Some Types of Group Policy Settings Settings to administer and customize Microsoft Internet Explorer on Windows 2000–based computers- Such as pre-populating favorites for all users Internet Explorer Let’s take a look
Computers Users Group Policy Settings for Computers and Users • Group Policy Settings for Computers: • Specify operating system behavior, desktop behavior, security settings, computer startup and shutdown scripts, computer-assigned application options, and application settings • Apply when the operating system initializes • Group Policy Settings for Users: • Specify operating system behavior, desktop settings, security settings, assigned and published application options, application settings, folder redirection options, and user logon and logoff scripts • Apply when users log on to the computer and during the periodic refresh cycle
How Group Policy Settings Are Applied in Active Directory • Group Policy Inheritance • Resolving Conflicts Between Group Policy Settings • Class Discussion: How Group Policy Is Applied
Site Domain OU Domain GPO Town.Belmont.Ma.Us All Users Police Fire Group Policy Inheritance Windows 2000 Applies GPO Settings in a Specific Order Child Containers Inherit GPO Settings from Parent Containers
Resolving Conflicts Between Group Policy Settings • All Group Policy Settings Apply Unless There Are Conflicts • The Last Setting Processed Applies • When settings from different GPOs in the Active Directory hierarchy conflict, the child container GPO settings apply
GPO1 GPO4 • GPO1 ensures that Favorites appears on the Start menu • GPO2 and GPO3 require a passwordof 11 characters and remove the Windows Update icon • GPO4 removes Favorites from the Start menu and adds the Windows Update icon Site GPO2 Domain GPO3 OU What are the resultant Group Policy settings for the OU? Class Discussion: How Group Policy Is Applied
GPO1 GPO4 Site GPO2 Domain OU Class Discussion: How Group Policy Is Applied (2) What are the resultant Group Policy settings for the OU? • A password must be at least 11 characters long • The Windows Update icon appears on the Start menu • Favorites does not appear on the Start menu GPO3
Monitoring and Troubleshooting Group Policy • Monitoring Group Policy • Group Policy Troubleshooting Tools • Troubleshooting Group Policy • What group policy settings are available
Group Policy Troubleshooting Tools • Windows 2000 Support Tools for Group Policy Troubleshooting: • Netdiag.exe – Network Connectivity issues • Windows 2000 Resource Kit Tools for Group Policy Troubleshooting: • Gpresult.exe – status of GPO on a client- DEMO
Best Practices Limit the Number of GPOs That Affect Any Computer or User Group Related Settings in a Single GPO Plan and Test GPOs Before You Implement Them
Review • Introduction to Group Policy • Group Policy Structure • How Group Policy Settings Are Applied in Active Directory • Modifying Group Policy Inheritance • Monitoring and Troubleshooting Group Policy • Best Practices