Exam 70-297 Designing a Microsoft Windows Server 2003

Exam 70-297 Designing a Microsoft Windows Server 2003

Exam 70-297 Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure Lesson 11: Planning Group Policy Implementation Goals Design Group Policies to control the user environment Design Group Policies to control the computer environment Understand Group Policy application Design a Group Policy administration strategy Design a Group Policy deployment strategy 11.1 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure Lesson 11: Planning Group Policy Implementation

(Skill 1) Designing Group Policies to Control the User Environment Group Policy Can be used to define a users desktop environment by managing various components Contains two primary nodes User Configuration: Affects environment associated with user accounts Computer Configuration: Responsible for defining configuration changes to computer accounts (see Skill 2) 11.2 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft Windows Server 2003

Active Directory and Network Infrastructure Lesson 11: Planning Group Policy Implementation (Skill 2) Designing Group Policies to Control the Computer Environment Computer Configuration node Responsible for defining configuration changes to computer accounts Changes apply to the computer account regardless of the user that is logged in Settings take precedence over user configuration settings if there is a conflict Use same process to design computer configuration policies as used for designing user configuration policies 11.3

2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure Lesson 11: Planning Group Policy Implementation (Skill 3) Understanding Group Policy Application Role of Group Policy begins when a computer starts up and user logs on (see Figure 11-1 for description of process of computer startup and user logon) Group Policies are inherited from parent containers to child containers Possible to set a separate Group Policy for a child container to override settings it inherits from its parent container Group Policies do not flow between domains Exception: A Group Policy applied to a site affects all users and/or computers in the site, regardless of domain

11.4 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure Lesson 11: Planning Group Policy Implementation (Skill 3) Understanding Group Policy Application (2) Processing sequence If no conflicts within policies, all settings from all policies apply If a conflict occurs, the policy to apply last wins Sequence in which Group Policy settings are applied Local GPO Site GPO

Domain GPO OU GPOs 11.5 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure Lesson 11: Planning Group Policy Implementation (Skill 3) Understanding Group Policy Application (3) If more than one GPO is linked to a site, domain, or OU, policies are processed in reverse order (bottom to top) for each container Exceptions to order in which GPOs are processed If a computer belongs to a workgroup, it processes only local GPOs

If the No Override option is set for a GPO, no configured policy settings in the GPO can be overridden In case of multiple GPOs set to No Override, the GPO that is highest in the Active Directory hierarchy gets highest priority; if multiple GPOs in a single container, the one at the bottom of the list wins 11.6 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure Lesson 11: Planning Group Policy Implementation (Skill 3) Understanding Group Policy Application (4) If Block Policy Inheritance is set for a domain or OU, the GPOs above that point in the structure are blocked

If there is a conflict between No Override and Block Inheritance, No Override always wins If Loopback settings are applied to a GPO list, the default GPO processing order is not maintained Group Policies are never applied to Windows NT, 95, 98 or Windows Me computers 11.7 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure Lesson 11: Planning Group Policy Implementation (Skill 3) Figure 11-1 The sequence in which computer configuration and user

configuration settings are applied 11.8 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure Lesson 11: Planning Group Policy Implementation (Skill 3) Figure 11-2 The GPO list 11.9 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure

Lesson 11: Planning Group Policy Implementation (Skill 4) Figure 11-3 The components of GPO administration 11.10 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure Lesson 11: Planning Group Policy Implementation (Skill 5) Designing a Group Policy Deployment Strategy Factors to consider when implementing Group Policy

Location of GPOs Delegation of authority Organization structure 11.11 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure Lesson 11: Planning Group Policy Implementation (Skill 5) Designing a Group Policy Deployment Strategy (2) Major types of Group Policy implementation strategies Centralized vs. decentralized GPO design

Functional role or team design Delegation with central control design or distributed control design 11.12 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure Lesson 11: Planning Group Policy Implementation (Skill 5) Designing a Group Policy Deployment Strategy (3) Centralized vs. decentralized GPO design Centralized approach suggests organization network should be maintained by a small number

of large GPOs Decentralized approach uses separate GPOs for specific policy settings 11.13 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure Lesson 11: Planning Group Policy Implementation (Skill 5) Designing a Group Policy Deployment Strategy (4) Functional role or team design Uses functional roles of users in the organization to apply Group Policy

Create an OU structure that corresponds to the team structure of the organization Create a GPO for each OU Minimizes the number of GPOs to be used as each GPO caters to the needs of a group 11.14 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure Lesson 11: Planning Group Policy Implementation (Skill 5) Designing a Group Policy Deployment Strategy (5) Delegation with central control design or distributed control design

Central control is based on delegating the administrative control of OUs to various administrators of an organization As an example, create a GPO with specific desktop settings at the domain level Settings would apply on all child containers, thus maintaining centralized control on the entire domain 11.15 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure Lesson 11: Planning Group Policy Implementation (Skill 5) Designing a Group Policy

Deployment Strategy (6) Resultant Set of Policy (RSoP) Useful tool for troubleshooting Group Policies Shows the effective Group Policy settings applied to a user, and the GPOs from which those settings are inherited New feature in Windows Server 2003 Similar to gpresult.exe, which is included in Windows 2000 Resource Kit for Windows 2000 domains 11.16 2004 Pearson Education, Inc.

Recently Viewed Presentations

  • Internships, post study work arrangements and gradaute employment

    Internships, post study work arrangements and gradaute employment

    RMIT Future Edge - Program Structure . 1. Experience Edge. Employment Experience (40 hours minimum) Enterprise Experience (40 hours minimum) Voluntary Experience (40 hours minimum) Exchange Semester + Complete job application questions for review . 2. Development Edge . LEAD...
  • This is the main title which is set in blue

    This is the main title which is set in blue

    Strategy and Planning Design Implement Run 서비스관리 전략 & 기획 워크샵 서비스관리 현황 진단 IBM Accelerators for IT Service Management IT 서비스 관리 설계 Managed Services Offerings IT 서비스 관리 구현 서비스 서비스 관리 전략 수립 및 기획 IBM Accelerators...
  • CAO Organizational Chart - cao-ombudsman.org

    CAO Organizational Chart - cao-ombudsman.org

    CAO Organizational Chart. WORLD BANK GROUP PRESIDENT. CAO VICE PRESIDENT. DISPUTE RESOLUTION. FUNCTION. Managed by Principal Ombudsman. COMPLIANCE. FUNCTION
  • Understanding Ratios Number a paper from one to

    Understanding Ratios Number a paper from one to

    Understanding Ratios Number a paper from one to 15 and find these ratios. Write the ratios. 1. Circles to squares 2. Circles to clouds 3. Clouds to circles 4. Circles to all figures 5. Clouds to all figures 6. All...
  • Propagating Plants Sexually - rowan.k12.ky.us

    Propagating Plants Sexually - rowan.k12.ky.us

    Cover the seeds with another two layers of moistened paper towels. Fold over each edge of the towels about one inch, then roll the towels and enclosed seeds into a tube (called a rag doll). Make one more rag dolls...
  • PowerPoint Slides for Professors Spring 2010 Version This

    PowerPoint Slides for Professors Spring 2010 Version This

    Insurance policies as contingent claim contracts that rely on pricing Inversion. The product priced before actual production costs are known. Thus, insurers factor in a margin for unfavorable pricing deviations.
  • II. Composition of Matter

    II. Composition of Matter

    What kind of properties would we use to classify all this matter? You mix two colorless liquids, the mixture turns green. What type of change occurred? Why? How? Ch. 9 - Classification of Matter II. Composition of Matter (p.36-44) Matter...
  • Are New Languages Necessary for Manycore?

    Are New Languages Necessary for Manycore?

    Multicore New languages aren't necessary Legacy code easily adjusted Manycore Implicitly Parallel Sequential Programming No optimization for sequential (custom allocators)‏ Points of non-determinism specified Parallel algorithms in sequential codes Debuggability, Understandability, Sanity The Answer Originates with ATE The Old Way:...