click below
click below
Normal Size Small Size show me how
Group Policy
cnit 242 exam 1
Term | Definition |
---|---|
what is policy-based admin done for? | --helps define an environment by setting policy and relying on the system to enforce them |
Group policy can: | --target users, computers, groups, sites, domains, or OUs --be linked to sites, domains, OUs --set values automatically or unset them given certain circumstances --do more than just lock down the desktop |
how do GPO settings apply? | --will apply only to users and computers that are contained in the domain, OU, or OU that the GPO is linked to, and that are specified in or are members of a group specified in security filtering |
how is AD group policy implemented? | --uses Group Policy Objects (GPOs) to define individual settings --can be edited/designed using the GPO editor in 2003 or Group Policy Management in server 2008/12/16 |
GPO deployment | --GPOs, once created, are linked to OUs or domains --assigned to the OU that contains the user, group, or computer -inheritance ensures that all users/computers in that OU will receive the GPO |
User vs Group GPOs | --each GPO has a user and a computer component • each component has settings specific to that resource • User / Computer / Both can be set • User policies are applied when a user logs in; computer policies are applied when the computer boots up |
What is the default GPO configuration? Not Configured Enabled Disabled Enforced | Not configured by default |
Policy Types and Prioritization | •there are more than one GPO type and they can be applied to many locations, there can be conflicts due to inheritance • GPOs executed in a particular order, each causing potential conflicts or overwrites |
GPO conflicts: 1. parent GPO has a setting value but child GPO does not (not configured) 2. parent GPO has a setting value and child GPO does too, but they don't conflcit 3. parent GPO has a setting value but child GPO's value is conflicting | 1. The child inherits the parent's GPO in full 2. The child inherits the parent's GPO in full and applies its own also 3. The child inherits the GPO but the conflicting setting on the child overwrites the inherited values |
The administrator has control over how parent GPOs impact child objects: | • Inheritance can be blocked for a GPO - Forces a child GPO to apply, regardless of conflicts • Inheritance can be forced to override lower-level GPOs - Forces a parent GPO to apply, regardless of conflicts |
Which of the following is not a way in which an administrator can control group policy inheritance: -force/block a child or parent GPO to apply regardless of conflict -disable inheritance domain-wide | Inheritance can be blocked or forced, but not disabled throughout the domain |
By default, if an enabled GPO setting in the parent OU conflicts with an enabled GPO setting in the child OU, the GPO setting in the child OU wins. True or False? | True: GPOs are applied in order from the root to the object. If both the parent OU and child OU have a setting applied, the parent setting with be applied, then the child setting will be applied. In effect, the child setting would "win" in this scenario. |
The best approach to implementing group policy is to create/modify one policy per OU that contains all of the applicable settings. True or False? | False: The best approach is to create separate policies for each setting and link them to applicable OUs. This creates a single point of administration for each policy. By making a change to the policy it will affect all OUs linked to the policy. |
What are the two components (items to which the policy can effect) to a Group Policy Object (GPO)? | User & Computer |