18
Windows System Administration Group Policy Borislav Varadinov Telerik Software Academy academy.telerik.com System Administrator [email protected]

Group Policy Borislav Varadinov Telerik Software Academy academy.telerik.com System Administrator [email protected]

  • View
    227

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Group Policy Borislav Varadinov Telerik Software Academy academy.telerik.com System Administrator bobi@itp.bg

Windows System Administration

Group Policy

Borislav Varadinov

Telerik Software Academy

academy.telerik.com

System [email protected]

Page 2: Group Policy Borislav Varadinov Telerik Software Academy academy.telerik.com System Administrator bobi@itp.bg

Table of Contents What is a Group Policy? Common Group Policy Scenarios Example of Group Policy Settings Local Group Policy User and Computer Configuration GPO Precedence Group Policy Management Console Group Policy Results and Modeling Group Policy Tools

2

Page 3: Group Policy Borislav Varadinov Telerik Software Academy academy.telerik.com System Administrator bobi@itp.bg

What Is Group Policy?

Manage user and computer environments

Enforce IT policies Simplify administrative tasks Implement security settings 3

AD DB

PolicyPolicyPolicy

Page 4: Group Policy Borislav Varadinov Telerik Software Academy academy.telerik.com System Administrator bobi@itp.bg

Common Group Policy Scenarios

Desktop Scenario Workstations Multiuser workstation Mobile Laptops Public Computer Kiosk

Server Scenarios Common IT and Security policies Web Farms Remote Desktop Services Farms

4

Page 5: Group Policy Borislav Varadinov Telerik Software Academy academy.telerik.com System Administrator bobi@itp.bg

Example of Group Policy Settings

Security Settings Account Policies

Local Policies

Firewall

Configuration Settings Desktop Screensaver

IE default page

Software Deployment Settings

5

Page 6: Group Policy Borislav Varadinov Telerik Software Academy academy.telerik.com System Administrator bobi@itp.bg

Local Group Policy

6

Selecting the Non-Administrators LGPO in the Browse for a Group Policy Object dialog box

Page 7: Group Policy Borislav Varadinov Telerik Software Academy academy.telerik.com System Administrator bobi@itp.bg

File AD Object

Domain

Group Policy Objects and Templates

7

PolicyObject

User Configuration

Computer Configuration

Template

Sysvol

Page 8: Group Policy Borislav Varadinov Telerik Software Academy academy.telerik.com System Administrator bobi@itp.bg

Policy

Link Group Policy Scope

8

SiteDomain OU

Page 9: Group Policy Borislav Varadinov Telerik Software Academy academy.telerik.com System Administrator bobi@itp.bg

User and Computer Configuration

9

Policy Policy

Page 10: Group Policy Borislav Varadinov Telerik Software Academy academy.telerik.com System Administrator bobi@itp.bg

GPO Precedence

10

Local Security Policy

Domain Policy

Parent OU PolicyChild OU Policy

Site Policy

Page 11: Group Policy Borislav Varadinov Telerik Software Academy academy.telerik.com System Administrator bobi@itp.bg

GPO Precedence (cont.)

GPO application order and scope can be affected by the following: Filtering by using security groups

Blocking Group Policy inheritance

Enforcing a GPO link

Disabling a GPO link

Windows Management Instrumentation filters (WMI filters)

11

Page 12: Group Policy Borislav Varadinov Telerik Software Academy academy.telerik.com System Administrator bobi@itp.bg

When is Group Policy Applied?

Startup and Shutdown Logon and Logoff Defined intervals Forced with GPUpdate tool

12

Page 13: Group Policy Borislav Varadinov Telerik Software Academy academy.telerik.com System Administrator bobi@itp.bg

Group Policy Management Console

MMC snap-in Easy management Reporting and modeling Includes Group Policy Object Editor

13

Page 14: Group Policy Borislav Varadinov Telerik Software Academy academy.telerik.com System Administrator bobi@itp.bg

Group Policy Results and Modeling

Group Policy Results

Reports actual policy settings

Group Policy Modeling

Simulates GPOs on user or

computer

14

Page 15: Group Policy Borislav Varadinov Telerik Software Academy academy.telerik.com System Administrator bobi@itp.bg

Using Gpupdate Gpupdate is a command-line tool used to update Group Policy settings on Active Directory objects before the normal update process takes place. gpupdate [/target:{computer|user}]

[/force] [/wait:value] [/logoff] [/boot]

15

Page 16: Group Policy Borislav Varadinov Telerik Software Academy academy.telerik.com System Administrator bobi@itp.bg

Other Group Policy Tools

Gpresult Command-line tool that provide

details for applied group policies and settings

RSOP.msc MMC tool that provide details for

applied settings

16

Page 17: Group Policy Borislav Varadinov Telerik Software Academy academy.telerik.com System Administrator bobi@itp.bg

форум програмиране, форум уеб дизайнкурсове и уроци по програмиране, уеб дизайн – безплатно

програмиране за деца – безплатни курсове и уроцибезплатен SEO курс - оптимизация за търсачки

уроци по уеб дизайн, HTML, CSS, JavaScript, Photoshop

уроци по програмиране и уеб дизайн за ученициASP.NET MVC курс – HTML, SQL, C#, .NET, ASP.NET MVC

безплатен курс "Разработка на софтуер в cloud среда"

BG Coder - онлайн състезателна система - online judge

курсове и уроци по програмиране, книги – безплатно от Наков

безплатен курс "Качествен програмен код"

алго академия – състезателно програмиране, състезания

ASP.NET курс - уеб програмиране, бази данни, C#, .NET, ASP.NETкурсове и уроци по програмиране – Телерик академия

курс мобилни приложения с iPhone, Android, WP7, PhoneGap

free C# book, безплатна книга C#, книга Java, книга C#Дончо Минков - сайт за програмиранеНиколай Костов - блог за програмиранеC# курс, програмиране, безплатно

?

? ? ??

?? ?

?

?

?

??

?

?

? ?

Questions?

?

Group Policy

http://academy.telerik.com

Page 18: Group Policy Borislav Varadinov Telerik Software Academy academy.telerik.com System Administrator bobi@itp.bg

Free Trainings @ Telerik Academy

"Web Design with HTML 5, CSS 3 and JavaScript" course @ Telerik Academy html5course.telerik.com

Telerik Software Academy academy.telerik.com

Telerik Academy @ Facebook facebook.com/TelerikAcademy

Telerik Software Academy Forums forums.academy.telerik.com