Chapter 6. Designing Active Directory for Group Policy


Chapter 6. Designing Active Directory for Group Policy

Terms you'll need to know:

  • Blocking

  • Filtering

  • Group Policy object (GPO)

  • Inheritance modification

  • Local Group Policy object

  • Loopback Processing

  • Override

  • Security groups

Techniques you'll need to master:

  • Understanding the purpose of Group Policies

  • Defining General Policy settings that can be configured through Group Policy

  • Determining how Group Policy is processed

  • Filtering GPOs using security groups

  • Modifying inheritance using blocking and override options

  • Understanding techniques to optimize Group Policy

  • Delegating authority over GPOs

  • Implementing design and testing guidelines for GPOs

In a networking environment, administrators need some way of employing standards for client workstations and supervising their computing environments. Group Policy is an administrative tool that can be used to administer different aspects of the client computing environment, from installing software to applying a standardized desktop.

In Windows NT 4.0, the tool used to administer the client computing environment is the Policy Editor. Group Policy in Windows 2000 serves the same purpose; only it is much more powerful and flexible. It is designed to function in the hierarchy of Active Directory. Group Policies can be created for users and computers and can be linked to the different levels (site, domain, and organizational unit) in the hierarchy, depending on to whom or to what the policy needs to apply. Group Policy can also be inherited in the hierarchy or filtered using security groups. Before creating and linking Group Policies, you need to assess the business's needs to determine the level of management it requires. This is an important step because it will have an impact on the creation of lower-level organizational units (OUs) in the hierarchy.

This chapter is broken down into five main topics: business needs for Group Policy, applying Group Policy, Group Policy planning issues, designing Group Policy, and testing Group Policy. Also, keep in mind the previously listed terms and techniques while working through the chapter.



MCSE Active Directory Services Design. Exam Cram 2 (Exam Cram 70-219)
MCSE Windows 2000 Active Directory Services Design Exam Cram 2 (Exam Cram 70-219)
ISBN: 0789728648
EAN: 2147483647
Year: 2003
Pages: 148

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net