click below
click below
Normal Size Small Size show me how
CIT226 Ch 15 and 16
CIT 226.01 Win Server Ch 15 Groups and OUs and Ch 16 GPO Studystack
Term | Definition |
---|---|
AGDLP | An acronym that stands for Microsoft’s recommendation of placing Accounts into Global groups, then placing these groups into Domain local groups, and finally granting Permissions to the domain local groups. |
AGUDLP | An acronym that stands for Microsoft’s recommendation of placing Accounts into Global groups, then placing these groups into Universal groups, then placing these groups into Domain local groups, and finally granting Permissions to the domain local groups. |
Built-in group | A group account created by default when Windows or Active Directory is installed on a computer. An example is the Domain Admins group. You can use these groups to set up a system of assistant administrators within your company. |
Domain local group | A domain local group can contain other domain local groups from its own domain, as well as global groups from any domain in the forest. A domain local group can be used to assign permissions for resources located in the same domain as the group. |
Global group | A global group can contain users from the same domain in which the global group is located, and global groups can be added to domain local groups to control access to network resources. |
Nesting | The act of creating a hierarchy of groups to provide users from different containers (domains, OUs, and so on) access to the resources they require for their jobs. |
Universal group | An Active Directory security group that can be used anywhere within a domain tree or forest. |
Windows Management Instrumentation (WMI) | A Windows Server 2012 R2 management infrastructure for monitoring and controlling system resources. |
Starter GPOs | Sets of preconfigured Administrative Template policy settings, including comments, can use for ease of creating new GPOs. When you use a Starter GPO to create a new GPO, includes all settings, values, comments, and delegation defined in Starter GPO. |
Linked policy | A Group Policy that exists in one object and is linked to another object. Linked policies are used to reduce administrative duplication in applying the same policies to multiple OUs. |
Group Policy Management Console (GPMC) | The MMC snap-in from which you can perform all management activities on GPOs, including such functions as creating and linking GPOs, modifying their inheritance, disabling or deleting them, and so on. |
Group Policy Management Editor | The Microsoft Management Console (MMC) snap-in used to modify the settings of a Group Policy object. |
Group Policy object (GPO) | A collection of policies that apply to a specific target, such as the domain itself (Default Domain Policy) or an OU. GPOs are modified through the Group Policy Management Editor to define policy settings. |
Group Policy | The Windows Server 2012 R2 feature that allows for policy creation, which affects domain users and computers. Policies can be anything from desktop settings to application assignments to security settings and more. |
Filtering | A Group Policy option that enables you to limit the effect of a GPO according to definitions such as security group membership or Windows Management Instrumentation (WMI). |
Administrative Templates | The section of Group Policy from which administrators can configure settings that are applied to users’ desktops, specify programs that users can run, and so on. They apply changes to client computer Registry settings. |