Implementing Group
Policy
Overview

What is Group Policy

Introduction to Group Policy

Group Policy Structure

How Group Policy Settings Are Applied in Active
Directory

Monitoring and Troubleshooting Group Policy

Best Practices
What is Group Policy

Group Policy is a technology that supports the
configuration of computers (both clients and servers)
and users in an Active Directory environment.

Group Policy supports a one-to-many configuration of
areas such as security settings, operating system and
application components, Internet Explorer maintenance,
software distribution, and more.

Through the creation of Group Policy Objects (GPOs),
administrators can target groups of users and
computers to which specific settings can be applied.

The result is a more consistent environment and the
potential for IT cost reduction.
What are the Operating System requirements for
Group Policy?

Domain-based Group Policy requires an Active
Directory domain (Windows 2000 or Windows Server
2003) and can be used to manage Windows 2000,
Windows XP Professional, and Windows Server 2003
operating systems.
Introduction to Group Policy
Group Policy
Site
Users
Domain
OU
Administrator Sets Group Policy Once
Computers
Windows 2000 Applies Continually
Group Policy Enables You to:

Set centralized (Top Level) and decentralized policies (Department and OU Level)

Ensure users have their required environments

Lower total cost of ownership by controlling user and computer environments

Enforce Written policies- As a reminder when you logon to this computer you are
bound by the Acceptable Use Policy. If you have any questions please contact….
 Group Policy Structure

Types of Group Policy Settings

Group Policy Settings for Computers and Users
Some Types of Group Policy Settings
Types of Group Policy Settings
Administrative
Templates
Internet Explorer
Registry-based Group Policy settings
Settings to administer and customize Microsoft Internet Explorer on
Windows 2000–based computers- Such as pre-populating favorites for all
users
Software Installation
Settings for central management of software installation
Scripts
Startup, shutdown, logon, and logoff scripts
Folder Redirection
Settings for storing of users’ folders on a network server
Let’s take a look
Group Policy Settings for Computers and Users

Group Policy Settings for Computers:



Specify operating system behavior, desktop behavior,
security settings, computer startup and shutdown
scripts, computer-assigned application options, and
application settings
Computers
Apply when the operating system initializes
Group Policy Settings for Users:


Specify operating system behavior, desktop settings,
security settings, assigned and published application
options, application settings, folder redirection options,
and user logon and logoff scripts
Apply when users log on to the computer and during
the periodic refresh cycle
Users
How Group Policy Settings Are Applied in Active
Directory

Group Policy Inheritance

Resolving Conflicts Between Group Policy Settings

Class Discussion: How Group Policy Is Applied
Group Policy Inheritance
Site
Windows 2000 Applies GPO
Settings in a Specific Order
Domain
OU
Domain GPO
Town.Belmont.Ma.Us
All Users
Child Containers Inherit
GPO Settings from
Parent Containers
Police
Fire
Resolving Conflicts Between Group Policy Settings

All Group Policy Settings Apply Unless
There Are Conflicts

The Last Setting Processed Applies

When settings from different GPOs in the
Active Directory hierarchy conflict, the child
container GPO settings apply
Class Discussion: How Group Policy Is Applied
GPO1

GPO1 ensures that Favorites appears
on the Start menu

GPO2 and GPO3 require a password
of 11 characters and remove the
Windows Update icon

GPO4 removes Favorites from the
Start menu and adds the Windows
Update icon
What are the resultant Group
Policy settings for the OU?
Site
GPO2
GPO3
Domain
OU
GPO4
Class Discussion: How Group Policy Is Applied (2)
GPO1
What are the resultant Group
Policy settings for the OU?

A password must be at least 11
characters long

The Windows Update icon appears on
the Start menu

Favorites does not appear on the Start
menu
Site
GPO2
GPO3
Domain
OU
GPO4
 Monitoring and Troubleshooting Group Policy

Monitoring Group Policy

Group Policy Troubleshooting Tools

Troubleshooting Group Policy

What group policy settings are available
Group Policy Troubleshooting Tools

Windows 2000 Support Tools for Group
Policy Troubleshooting:


Netdiag.exe – Network Connectivity
issues
Windows 2000 Resource Kit Tools for
Group Policy Troubleshooting:

Gpresult.exe – status of GPO on a
client- DEMO
Best Practices
Limit the Number of GPOs That Affect Any Computer or User
Group Related Settings in a Single GPO
Plan and Test GPOs Before You Implement Them
Review

Introduction to Group Policy

Group Policy Structure

How Group Policy Settings Are Applied in Active
Directory

Modifying Group Policy Inheritance

Monitoring and Troubleshooting Group Policy

Best Practices