Understanding Group Policy Understanding Group Policy on Windows Server 2003on Windows Server 2003

What we will cover:What we will cover:

Group Policy ConceptsGroup Policy Concepts Linking and Order of PrecedenceLinking and Order of Precedence Group Policy Management ConsoleGroup Policy Management Console

Prerequisite KnowledgePrerequisite Knowledge

Experience supporting Microsoft networksExperience supporting Microsoft networks Familiarity with the Windows server user interfaceFamiliarity with the Windows server user interface Understanding of Active Directory conceptsUnderstanding of Active Directory concepts

AgendaAgenda

WindowsWindows Server 2003 Group Policy Server 2003 Group Policy ConceptsConcepts

Linking and Order of PrecedenceLinking and Order of Precedence Group Policy Management ConsoleGroup Policy Management Console

Windows Server 2003 Group PolicyWindows Server 2003 Group PolicyGroup Policy ConceptsGroup Policy Concepts

Used to manage users and computersUsed to manage users and computers Deploys Policy through Active DirectoryDeploys Policy through Active Directory Applied at site, domain, and OU levelsApplied at site, domain, and OU levels

Group Policy is highly flexibleGroup Policy is highly flexible Registry-based policy settingsRegistry-based policy settings Security settingsSecurity settings Software installationSoftware installation User Environment controlUser Environment control Internet Explorer maintenanceInternet Explorer maintenance

Windows Server 2003 Group PolicyWindows Server 2003 Group PolicyGroup Policy CapabilitiesGroup Policy Capabilities

Folder redirectionFolder redirection Software restrictionSoftware restriction Desktop configurationDesktop configuration Control of Windows applicationsControl of Windows applications

AgendaAgenda

Windows Server 2003 Group Policy Windows Server 2003 Group Policy ConceptsConcepts

Linking and Order of PrecedenceLinking and Order of Precedence Group Policy Management ConsoleGroup Policy Management Console

Windows Server 2003 Group PolicyWindows Server 2003 Group PolicyGroup Policy Order of PrecedenceGroup Policy Order of Precedence

Local Security Policy

Site Policy

Domain Policy

Parent OU Policy

Child OU Policy

Windows Server 2003 Group PolicyWindows Server 2003 Group PolicyGroup Policy Objects and LinksGroup Policy Objects and Links

GPOs contain policy settings GPOs contain policy settings Links define what objects the GPO will Links define what objects the GPO will

targettarget Scope of ManagementScope of Management

Sites, Domains, OU, OU, etc.Sites, Domains, OU, OU, etc.

Group Policy Management ConsoleGroup Policy Management Console Better illustrates the relationship between Better illustrates the relationship between

GPOs and LinksGPOs and Links

AgendaAgenda

Windows Server 2003 Group Policy Windows Server 2003 Group Policy ConceptsConcepts

Linking and Order of PrecedenceLinking and Order of Precedence Group Policy Management ConsoleGroup Policy Management Console

Windows Server 2003 Group PolicyWindows Server 2003 Group PolicyGroup Policy Management ConsoleGroup Policy Management Console

Windows Server 2003 Group Policy Windows Server 2003 Group Policy Administrative Template ExtensionAdministrative Template Extension

Used by Group Policy to configure Used by Group Policy to configure settings in a Group Policy Objectsettings in a Group Policy Object

Server Side Snap-inServer Side Snap-in Loads in Group Policy Object EditorLoads in Group Policy Object Editor ADM filesADM files

Client-Side ExtensionClient-Side Extension Writes policy settings that update registry Writes policy settings that update registry

keys on target client computerskeys on target client computers

Windows Server 2003 Group Policy Windows Server 2003 Group Policy ADM FilesADM Files

Enables configuration of policy settingsEnables configuration of policy settings Do not actually contain policy settingsDo not actually contain policy settings Policy settings are contained registry.polPolicy settings are contained registry.pol

Windows Server 2003 contains:Windows Server 2003 contains: System.admSystem.adm Inetres.admInetres.adm Conf.adm Conf.adm Wmplayer.admWmplayer.adm Wuau.admWuau.adm

Location of ADM filesLocation of ADM files

Windows Server 2003 Group Policy Windows Server 2003 Group Policy ADM Files WalkthroughADM Files Walkthrough

Windows Server 2003 Group PolicyWindows Server 2003 Group Policy Registry.pol Files WalkthroughRegistry.pol Files Walkthrough

Windows Server 2003 Group Windows Server 2003 Group PolicyPolicy

Group Policy Concepts and the GPMCGroup Policy Concepts and the GPMC

Editing Group Policy ObjectsEditing Group Policy Objects

Creating and Managing Group PoliciesCreating and Managing Group Policies

demonstrationdemonstration

Session SummarySession Summary

Group Policy allows you to manage and control your environment more easilyGroup Policy allows you to manage and control your environment more easily Use the new GPMC to manage GPO’s and Security PoliciesUse the new GPMC to manage GPO’s and Security Policies