We will be undergoing scheduled maintenance on May 20th, 2013 at 02:00 GMT.
Visitors to VTC.com will be able to view all introductory videos for each training course.
Free Trial Members will gain access to first three chapters for each training course.
Full Access Members have full access to VTC.com�s entire library of video tutorials.
There are two tools that are built in to the group policy management console that allow us to view group policy options, but the two tools are totally different. First what we are going to talk about is group policy modeling and group policy modeling allows us to kind of do or pretend if we where to run this particular policy then what would happen. This is new to Server 2003 in fact it requires a Windows Server 2003 domain controller in order for it to be run, but not all of the domain controllers have to be Server 2003 but it requires at least one Server 2003 domain controller in order to run and, we can analyze proposed settings then later we would talk about group policy results which are actual results that are running on our network right now. First of all take a look at group policy modeling, so we are going to go back into group policy management console and let us say we want to model this group policy that we have right now, these group policies that we are working with. In other words if we were going to roll out what we have right now what might be the problem with the policies that we have. So we are going to right click on group policy modeling and then click on group policy modeling wizard, that takes us into the group policy modeling wizard dialog box and this allows us to simulate a policy to point. So now we are going to next then it says ok what domain controller you want? We can select only certain domain controllers or we can just say any available to make controller running Server 2003 related. We are going to click on next and then it says "ok what containers, did you want this to be specific to a particular container or did you want it to be for the entire domain? " What we want to do is just make it for the entire domain so click on browse and then just select the default which is the domain and then we are going to click on next it says "ok ,what about any advanced options?". This is a slow network did you want to include some sites or did you want to do here ? We are not going to do any advanced options right now, we will click on next and what about security? Do you want to include every body, authenticated users as well as the everyone group just to see what we get? It is possible to filter this security groups as well ,we are going to click on next and then what about computer security groups, we will be taking authenticated user' everyone group as well. Now what about the * filters? We will talk about windows management instrumentation later on but basically what allows us to do is to get inside a kind of the soul of the computer and determine how much hard drive space it has? How much RAM it has? And if we know that based on getting that information that we don't necessarily want that policy to be applied to that computer then the group policy objects could make those decision. It could find out that information from computer before it runs. Right now we are not going to use * for users and for computers. So it says "ok those are your selections, is that what you wanted computers and if it is not then we could go back, but in this case it is we will click on next and it processes our selections, click on finish and it generates a report and a nice thing about this report is that we can send this report to some one else. Now by clicking on the setting tab and then right clicking on the report we can print and save the report. We can save the report in html format and send it to somebody and perhaps an email or copy it for them on a disk so we can save the report in anyway we choose. Let us take a look at the report look at the summary of the report and let us take a look at the simulated security group membership, that was the everyone and authenticated users as far as group policy objects are concerned we are going to look at the applied GPOs. Let us look at what we have applied, well it says "ok no problem we applied the test policy we applied the default domain policy". What about denied GPOs ,well it denied the anti virus software policy. Why? We never put any thing in it remember we made an anti virus policy that we would have put a software package in for and we never did it. So basically it is saying, that was empty so I really could not do much therefore. So I didn't and this way we can tell what is going on within a system. We click on component status we see that a group policy infrastructure was a success. Folder redirection would have been a success in other words we actually did put some folders in there that it could find, we used the right U&C *command. So as you can see group policy modeling can be an effective tool in making sure that group policy is going to roll out the way that we would expect it to without actually ruling it out. So that is the power group policy modeling. In fact we can then send it to somebody and say this is what I am proposing, it makes it even better. So this is group policy modeling, but we can also look at group policy results. That is what actually going on, on our system right now. What being applied right now or may be what not being applied that we think should be being applied so we can use this as a trouble shooting device. We will talk about group policy results in next section.
| Course: | Microsoft Windows Server 2003 (70-290) |
| Author: | Bill Ferguson/Certified Instructor |
| SKU: | 33497 |
| ISBN: | 1932072918 |
| Release Date: | 2004-06-03 |
| Duration: | 8.5 hrs / 107 lessons |
| Captions: | No |
| Compatibility: |
Vista/XP/2000, OS X, Linux QuickTime 7, Flash 8 |