Gp1

1

Group Policy

Group Policy is a Collection of Settings which can be applied on Computers and Users. With Group Policy Administrator can Centrally manage the Computers and Users. Ease Administration using Group Policy

2

Desktop Settings

My Computer Icon My Documents Icon Internet Explorer All Icons on Desktop

Start Menu Settings

Help Search Control Panel Run Command

Allow or Deny Hide or Show

3

Remove Remove Remove Remove

My Network places Icon My Documents Icon Internet Explorer Recycle Bin

4

Before Group Policy

5

After Group Policy

6

After Group Policy

7

Organizational Unit

It is a logical container which contain Active Directory Objects (Users, Groups, OU & other objects ) It is also called as SUBTREE It is used for Minimizing Administrative tasks It is used for Organizing and Managing the Active Directory Objects It is used for Delegating the Control to one or more Users

8

What Is Delegation of Control ?

The process of decentralizing management of organizational units

Domain

OU1

Admin1

OU2

Admin2

OU3

Admin3

9

What Is Delegation of Control ?

Assigning management of an organizational unit to another user or group Delegated administration: Eases

administration

by

distributing

routine administrative tasks Provides users or groups more control over local network resources Eliminates

the

need

for

multiple

administrative accounts

10

Admin1

OU1

OU2 Admin2

OU3

ZOOM.COM

Admin3

11

Levels of Group Policy

Domain OU

Domain GPO

Site OU

Site GPO

OU

Organizational Unit GPO

Organizational Unit GPO

12

Hierarchy of Group Policy GPO GPO 11

T O P

Site GPO GPO 22

TO B O T T O M

GPO GPO 3 Domain GPO GPO 44 OU

OU OU

OU OU

13

What Are User and Computer Configuration Settings?

Group Policy settings for computer control: Software settings Windows settings Administrative templates

Group Policy settings for users control: Software settings Windows settings Administrative templates

14

GPO Components

Group Group Policy Policy Container Container Group Group Policy Policy Object Object Stored Stored in in Active Directory Directory Provides Provides version version information information Group Policy Policy Template Contains Group Policy settings Stores content in two locations Stored Stored in in shared shared SYSVOL SYSVOL folder folder Provides Provides Group Group Policy Policy settings

15

When Is Group Policy Applied?

Computer starts

Refresh Refresh Interval Interval

Computer settings applied Startup scripts run

User logs on

Refresh Refresh Interval Interval

User settings applied Logon scripts scripts run run

16

Group Policy Hide My Computer Icon Zoom.com

Hide My Computer Icon

Hide My Computer Icon

Hide My Computer Icon

Mcse.Zoom.com Ccna.Zoom.com

Zoom.com Site Level Group Policy

17

Group Policy DC

ADC

Hide Internet Explorer Icon Hide Internet Explorer Icon

Clients

ZOOM.COM Domain Level Group Policy

18

Group Policy Sys1

Sys2

Hide Recycle Bin Icon

Hide Recycle Bin Icon

OU Level Group Policy

19

Blocking the Inheritance of a GPO

Domain GPOs

Production

Sales

No No GPO settings settings apply apply

20