Visitors to VTC.com will be able to view all introductory videos for each training course.
Free Trial Members will gain access to first three chapters for each training course.
Full Access Members have full access to VTC.com�s entire library of video tutorials.
Group policy is an extremely powerful tool in active directory. With group policy we can determine security settings for computers and for users, we can determine what users can do, and what they can see on the network. We can even change their local registries without having to visit the machine. We can lower our total cost of ownership of running the network and as we said before group policy is not policy for groups, group policy is groups of policies. They are used to manage sites and domains and OUs . In this chapter we will discuss managing group policy and in particular we are going to talk about what group policy objects are. What makes up a group policy object? Then we will talk about creating and linking GPO's, the tools that we use to create and link GPOs, and what our options are, we will talk about filtering GPOs. We can use security groups to filter GPOs but group policies are not policies for groups. I know that sounds like that is contradictory but we will talk about how we can use security groups to filter GPOs. We can also use block inheritance. Block inheritance allows us more granular control, allows us to put somebody in charge of an organizational unit and then they can determine what policies they want to take to an the organizational unit about them. But there are some policies that we absolutely want enforced across the entire network. May be they are set at domain level, we don't want anybody to be able to block those at OU level. Then we will talk about how we can enforce GPOs as well. We will also discuss configuring group policy settings, configuring group policy settings for computers as well as for users and take a look at an overview of all the different settings that we can make for group policy. Then we will get into more specifics about settings and we will talk about assigning scripts using group policy. We have been able to make logon scripts and start up scripts, log off scripts for quite a while now. The problem is getting them to run in exactly the right sequence. In a group policy we can just put them in the right box so that they would run in the right sequence. We will talk about how that works. In group policy we can implement folder redirection which means that if people are working on the same project and they want to store their data for that project in the same place, we can automatically make that data redirect and store in the power server that we choose. We can redirect data based on security groups as well. We will talk about how that works. We will also take a look at some new tools - the group policy management console . In the group policy management console will allow us to determine which GPOs are applied to which OU or to the domain or to the site and it will also allow us to do group policy modeling and group policy results importing . So first, let us just take a look at what makes up a group policy object - There is basically two parts to a group policy object. The only time you would probably need to know this is for a test. Probably no one is going to come up to you when you are running the network what are the two parts of the group policy object? But on the test it is a good thing to know that the group policy object is made up of a group policy container which is located in the active directory and it provides version information about the group policy and it is made up of a group policy template which is located in the domain controller's syswall folder. That is the folder that replicates to all the other domain controllers and yet provides the settings that are applied. So that is what makes up a group policy object. Now in the next section we will take a look at how we can create and link group policy objects. That is next.
| Course: | Microsoft Windows Server 2003 (70-290) |
| Author: | Bill Ferguson/Certified Instructor |
| SKU: | 33497 |
| ISBN: | 1932072918 |
| Release Date: | 2004-06-03 |
| Duration: | 8.5 hrs / 107 lessons |
| Captions: | No |
| Compatibility: |
Vista/XP/2000, OS X, Linux QuickTime 7, Flash 8 |