MCSE-08-Implementing of An Active Directory Service-06-Lab

Implementing Group Policy
ADVANTAGE PRO Chennais Premier Networking Training Center
Installing Group Policy Management Console

Download the Group Policy Management Tool from internet. Run the EXE file which you have downloaded from the internet The installing procedure follows:
This is welcome wizard then click NEXT to continue
Select I AGREE to accept the license Click NEXT toagreement continue
Instillation is in under process
Then click FINISH
Your tool is installed then select the tool from the list
Specify a Domain Controller for Managing GPOs
Expand the Domain
Select the DOMAIN CONTROLLER
Select the Domain
Enabled domain policy will displayed here
Loop back Processing

Loop back processing applies the set of GPOs for the computer to any user who logs on, is affected by this settings. Loop back processing has two modes -- Replace Mode -- Merge Mode

Replace Mode This mode replaces the users settings that are defined in computer GPOs. Replace GPOs with the user settings that are normally applied to the user.

Merge Mode This mode combines the user settings that are defined in computer GPOs and the users GPOs. If conflict occurs, the user settings in the computers GPO take precedence over the users normal settings.
Configure the User Group Policy Loop back Processing Mode
Click Group Policy Management
Select Group policy Objects
Select EDIT
Select Administrative templates
Select SYSTEM
Select Group Policy
Select the policy
Double click the policy
Select the option
Select replace are merge
Click OK
Order in which Group Policy Applied

When Computer Starts
Computer settings applied Startup Scripts runs
When User logs on

User settings apllied Logon scripts run
Assign Group Policy Script Settings
Procedure for Copying a Script
Click Group Policy Management
Right click the policy and select Edit
Select windows settings
Select scripts
Double click the log on script
Type the Message
Click ADD
Click Browse
Click OK
Click OK

Logon script will displayed here
Configure Refresh Rates for Domain Controller
Select Group Policy
Enable the policy to refresh
Mention the rates
Click OK
Your policy is enabled
Refresh Group Policy using Gpupdate.exe

Procedure In the Run dialog box, type cmd and then press Enter Type Gpupdate [/target:{computer/user}] [/force] [/wait:vslue] [/logoff] [/boot]
Type CMD
Type the command and click Enter
Copy Operation
A copy of a GPO transfers only the settings within a GPO The new GPO is created unlinked When you copy a GPO from a domain to another, you must specify the mapping behavior.
Copy a GPO
Right Click the policy
Copy a GPO
Select Copy
Copy a GPO
Right Click the group policy and select Paste
Copy a GPO
Select this option Click OK
Copy a GPO
The GPO is copying
Copy a GPO
Created policy will display here
Backup Operation
In a Backup operation, Group Policy Management export all data in the GPO to the selected file and saves the GPT files You can send backed-up GPO to folder by using a restore or import operation You can only restore a backed-up GPO to another domain by using an import operation.
Store a Backup
Identify each backed-up GPO by one of the following criteria GPO display name GPO GUID Description of the backup Date and time stamp of the backup Domain name
Back Up a GPO
Click Group policy Management
Back Up a GPO
Select the policy to take Backup
Back Up a GPO
Right click the policy and select Backup
Back Up a GPO
Mention the Path Click Backup
Back Up a GPO
Click OK
Back Up a GPO
Restore Operation
In a restore operation, the contents of the GPO are returned to exactly the same state. You can restore exiting GPO or a deleted GPO that was backed up.
Restoring a Deleted GPO

Right click and select Manage
Manage Backup
Select RESTORE
Click OK
Restore in process
Click OK
Common problems with imlementing Group Policy

SYMPTOM Cannot open a GPO CAUSE Read and Write permissions for the GPO are not signed A networking problem GPO are not applied to security groups
Cannot edit a GPO Cannot apply Group Policy on a security group No effect of Group Policy on a site, Group Policy settings are not configured correctly domain, or organizational unit No effect of Group Policy in an GPOs cannot be linked to Active Directory containers Active Directory container No effect of Group Policy on a client A non-local GPO can overwrite local polices computer
Group Policy Modeling

You can simulate a policy deployment for users and computers before applying the policies. This feature in Group Policy Management is known as Resultant Set of Policies(RSoP). To verify Group Policy settings, you must first create a Group Policy Query.
Creating a Group Policy Modeling Query
Select GPM
Select GPM and right click
And select this wizard
Click NEXT
Select the domain controller name Click Next
Select the information
Click Next
Click Next
Select the group Click Next
Click Next
Click Next
Click Finish
Viewing the Group Policy Modeling Query
Click GPM

Right Click the domain controller and select this option
Select Action

Select Properties
Verify Group Policy Settings using Group Policy Results

Group Policy Results is used to determine the policy settings that are applied to a computer. This data is similar to Group Policy Modeling, it is obtained from the client computer.
Creating a Group Policy Results Query
Click GPM
Right Click the GPR and select GPR wizard
Click Next
Click Next
Mention the user
Click Next
It will display Click Next the summary of the selection
Click Finish
Click here

Events will display here
Viewing the Group Policy Results Query
Click GPM
Right click and select Advance View
Click OK
Delegation of GPOs
Delegate the ability to create GPOs: Add the group or user to the Group Policy Creator Owerns group. This only method is available prior to Group Policy Mangement. Explicity assign the group or user premission to create GPOs.
Delegation of GPOs
Delegate Permissions on a individual GPO: Read Edit settings Edit, Delete, Modify Security Read (from Security Filtering) Custom
Delegation of WMI Filters

The permissions on the WMI Policy container determine the permissions that a user has to create, edit, and delete WMI filters There are two permissions for creating WMI filters: -- Creator Owner -- Full Control
Delegating Administrative Control for GPO
Here select the delegation
Select the user
Mention the permission
DEPLOYING AND MANAGING SOFTWARE BY USING GROUP POLICY
WINDOWS INSTALLER SERVICE: Fully automates the software installation and configuration process. Modifies or repairs an existing application installation. It installs an application either directly from the CD-Rom or by using group policy.
WINDOWS INSTALLER PACKAGE: Information about installing or uninstalling an application. A windows installer file with an .msi extension Summary information about the software and the package. A reference to an installation point where the product files reside.
DEPLOYING SOFTWARE: Deploying software ensures that required application are available from any computer that a user logs on. Before going to deploy a software you must specify how application are installed and maintained in your organization.
SOFTWARE DEPLOYMENT PROCESS : Create a software distribution point. Use GPO to deploy a software. Change the software deployment properties.
There are two types of software deployment. Assigning Publishing
ASSIGNING: In assigning there are two methods one is user configuration another one is computer configuration.
PUBLISHING: In publishing there are two methods one is using add or remove program another one is using document activation.
TO CREATE A SOFTWARE DISTRIBUTION POINT
Select folder
Select this folder and right click the folder and select share and security
Here select Share this folder
Mention the name of the share folder
Here select Permissions
The default permission is Read
Give the full control to for Every One
Then give Apply
Then click OK
Then click OK
Then copy the content which you want to install
TO USE A GPO TO DEPLOY SOFTWARE
Select the Active Directory Users and Computers
Right click the OU which you want to deploy the software
Select Properties
Here select group policy
Here select NEW
Mention the name as deployment
Then click EDIT
Here select Software Settings
Select software installation and select new package
Select the location of the particular package
Then click OPEN
Then select the deployment method
Click OK
Our software Deployed here
TO CONFIGURE THE DEFAULT OPTIONS FOR SOFTWARE INSTALLATION
Click Active Directory Users and Computers
Select the OU and click Properties
Here select group policy
Click NEW to create a policy
click EDIT to edit the policy
Select Software Settings
Select Software installation and select Praoperties
Select advance
Selec this option
Click OK
TO CHANGE THE SOFTWARE DEPLOYMENT PROPERTIES FOR A SOFTWARE PACKAGE
CONFIGURING SOFTWARE DEPLOYMENT
SOFTWARE CATEGORIES : To organize assigned and published software into logical groups. So users can easily locate applications in Add or remove programs. We can create software categories to arrange different applications.
You can organize software into categories,such as graphics, Microsoft office, and accounting categories. You can use the same list of software categories in all policies in the forest.
TO CREATE A CATEGORY
Then login in to the client machine as Test User
TO ASSIGN A SOFTWARE PACKAGE TO CATEGORY
SOFTWARE UPGRADES : You can use group policy to deploy and manage software upgrades that meet departmental requirements in your organization. Upgrades typically involve major changes to software and have a new version numbers. A new version of the software is released that contains new and improved features.
Patches and security or functional enhancements have been made to the software since the last release. An organization decides to use different vendors software. There are three methods of upgrades Mandatory upgrade. Optional upgrade. Selective upgrade.
MANDATORY UPGRADE: These upgrades automatically replace an old version of software with an upgraded version. OPTIONAL UPGRADE: These upgrades allow users to decide when to upgrade to the new version. SELECTIVE UPGRADE: If some users require an upgrade but not others.
TO DEPLOY AN UPGRADE
DEPLOY THE NEXT VERSION OF THE SOFTWARE.
SOFTWARE REDEPLOYMENT: You can redeploy a deployed package to force a reinstallation of the software. If there are interoperability issues or viruses that a reinstall of the software will fix.
TO REDEPLOY A SOFTWARE PACKAGE
REMOVING DEPLOYED SOFTWARE: There are two removal methods Forced removal. Optional removal.
FORCED REMOVAL: You can force the removal of the software. It will automatically deletes the software from a computer. Removal takes place before the desktop appears.
OPTIONAL REMOVAL: You remove the software from the software installation. Software is not actually removed from computers. The software no longer appears in Add or Remove programs, but users can still use it. If users can manually delete the software, they cannot reinstall it.

MCSE-08-Implementing of An Active Directory Service-06-Lab

Încărcat de

Informații document

Descriere originală:

Titlu original

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

MCSE-08-Implementing of An Active Directory Service-06-Lab

Încărcat de

Drepturi de autor:

Formate disponibile

Implementing Group Policy

ADVANTAGE PRO Chennais Premier Networking Training Center

Installing Group Policy Management Console

ADVANTAGE PRO Chennais Premier Networking Training Center

Installing Group Policy Management Console

This is welcome wizard then click NEXT to continue

ADVANTAGE PRO Chennais Premier Networking Training Center

Installing Group Policy Management Console

Select I AGREE to accept the license Click NEXT toagreement continue

ADVANTAGE PRO Chennais Premier Networking Training Center

Installing Group Policy Management Console

Instillation is in under process

ADVANTAGE PRO Chennais Premier Networking Training Center

Installing Group Policy Management Console

Then click FINISH

ADVANTAGE PRO Chennais Premier Networking Training Center

Installing Group Policy Management Console

ADVANTAGE PRO Chennais Premier Networking Training Center

Specify a Domain Controller for Managing GPOs

Expand the Domain

ADVANTAGE PRO Chennais Premier Networking Training Center

Specify a Domain Controller for Managing GPOs

Select the DOMAIN CONTROLLER

ADVANTAGE PRO Chennais Premier Networking Training Center

Specify a Domain Controller for Managing GPOs

Select the Domain

ADVANTAGE PRO Chennais Premier Networking Training Center

Specify a Domain Controller for Managing GPOs

Enabled domain policy will displayed here

ADVANTAGE PRO Chennais Premier Networking Training Center

Loop back Processing

ADVANTAGE PRO Chennais Premier Networking Training Center

Loop back Processing

ADVANTAGE PRO Chennais Premier Networking Training Center

Loop back Processing

ADVANTAGE PRO Chennais Premier Networking Training Center

Configure the User Group Policy Loop back Processing Mode

Click Group Policy Management

ADVANTAGE PRO Chennais Premier Networking Training Center

Configure the User Group Policy Loop back Processing Mode

Select Group policy Objects

ADVANTAGE PRO Chennais Premier Networking Training Center

Configure the User Group Policy Loop back Processing Mode

ADVANTAGE PRO Chennais Premier Networking Training Center

Configure the User Group Policy Loop back Processing Mode

Select Administrative templates

ADVANTAGE PRO Chennais Premier Networking Training Center

Configure the User Group Policy Loop back Processing Mode

ADVANTAGE PRO Chennais Premier Networking Training Center

Configure the User Group Policy Loop back Processing Mode

Select Group Policy

ADVANTAGE PRO Chennais Premier Networking Training Center

Configure the User Group Policy Loop back Processing Mode

Select the policy

ADVANTAGE PRO Chennais Premier Networking Training Center

Configure the User Group Policy Loop back Processing Mode

Double click the policy

ADVANTAGE PRO Chennais Premier Networking Training Center

Configure the User Group Policy Loop back Processing Mode

Select the option

ADVANTAGE PRO Chennais Premier Networking Training Center

Configure the User Group Policy Loop back Processing Mode