1 / 25

Group Policy - Part 2 of 3

Group Policy - Part 2 of 3. Rick Claus IT Pro Advisor Microsoft Canada rick.claus@microsoft.com http://blogs.technet.com/rclaus. What Will We Cover?. Advanced Group Policy management Deploying software with Group Policy Group Policy troubleshooting. Agenda. Implementing Group Policy

bruno-osborn
Télécharger la présentation

Group Policy - Part 2 of 3

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Group Policy - Part 2 of 3 Rick Claus IT Pro Advisor Microsoft Canada rick.claus@microsoft.com http://blogs.technet.com/rclaus

  2. What Will We Cover? Advanced Group Policy management Deploying software with Group Policy Group Policy troubleshooting

  3. Agenda Implementing Group Policy Deploying Software Troubleshooting Group Policy

  4. Domain-Level Security Settings Account Policies Local Policies IP Security Policies File and Registry ACLs Software Restriction Policies Account Policies Local Policies IP Security Policies File and Registry ACLs Software Restriction Policies

  5. Demo demonstration Configuring Domain Policies

  6. Software Restriction Policies Software Restriction Policies Hash Rule Certificate Rule Path Rule Internet Zone Rule Application started

  7. Using Software Restriction Policies \\LOGIN_SRV\Scripts\CustomerScript1.vbs C:\Documents and Settings\ILUVU.txt.vbs C:\WINDOWS\SYSTEM32\pagefileconfig.vbs C:\WINDOWS\SYSTEM32\eventquery.vbs

  8. Demo demonstration Software Restriction Policies

  9. Managing Desktops Local Folder Shared Network Folder Elevated privileges

  10. Demo demonstration Managing Desktops

  11. Group Policy Filtering Security filtering Refines which users and computers process GPO WMI filtering Filter based on attributes of target computer Best practice: If you deny GPOs to certain users, disable Read access as well.

  12. Group Policy Inheritance Link order Block inheritance Enforcement Link status www.microsoft.com/windowsserver2003/gpmc/gpmcwp.mspx

  13. Demo demonstration Group Policy Filtering and Inheritance

  14. Agenda Implementing Group Policy Deploying Software Troubleshooting Group Policy

  15. Software Deployment Options SMS Group Policy WSUS Approve and distribute critical updates Targeted software deployment Rich, granular software distribution

  16. Group Policy Software Deployment

  17. Demo demonstration Deploying Software with Group Policy

  18. Session Recap Domain-level security settings Software restriction policies Group Policy filtering and inheritance Software deployment with Group Policy

  19. Agenda Implementing Group Policy Deploying Software Troubleshooting Group Policy

  20. Use the Troubleshooting Flowchart No No Yes Yes Is the setting listed? Is the GPO in the Denied list? Yes No Does Group Policy Results lists the policy as applied? 1. Inheritance 2. Asynchronous 3. Loopback 1. Replication 2. GP Refresh 3. Slow Link 1. Security Filtering 2. Disabled GPO 3. WMI Filter 1. SOM 2. GP Refresh 3. Network

  21. Network and Replication Issues DNS SMB and LDAP Intersite Replication Slow Link Connections

  22. Group Policy Troubleshooting Tools >GPResult.exe >GPMonitor.exe >GPOTool.exe >ADDiag.exe

  23. Demo demonstration Troubleshooting Group Policy

  24. Session Summary Group Policy is a powerful tool Deploy software through Group Policy Several tools are available for troubleshooting Group Policy

  25. For More Information Visit TechNet atwww.microsoft.ca/technet Rick Claus IT Pro Advisor Microsoft Canada rick.claus@microsoft.com http://blogs.technet.com/rclaus

More Related