Chapter 10. Managing the User Environment by Using Group Policy

Objectives

This chapter covers information that you will most likely see on the testand on the job. However, it doesn't cover any specific objectives on the Microsoft Managing and Maintaining a Microsoft Windows Server 2003 Environment exam.

Outline

Introduction		412
Assigning Scripts with Group Policy		412
	Benefits of GPO Scripts	412
	How Group Policy Scripts Work	413
Configuring Folder Redirection		416
Restricting Group Membership		420
Determining Applied GPOs		421
	GPResult	422
	Group Policy Results	424
	Group Policy Reporting	426
Chapter Summary		430
	Key Terms	430
Apply Your Knowledge		430

Study Strategies

• In studying this section, be sure to practice all the activities described. Become very familiar with the Group Policy Management Console, how it is installed, and its capabilities and limitations.

• To perform the exercises in this chapter, you should have the domain controller that you built in previous chapters and at least one other machine, either a workstation or a server.

• The exercises in this chapter continue the use of the users and the Organizational Unit (OU) structure that we first created in Chapter 2, "Managing User and Computer Accounts." If you do not already have them in place, review the exercises in that chapter and re-create them.

• Some of the exercises in this chapter have been written to reflect the use of the Group Policy Management Console. Most of them can still be performed from the Group Policy tab of the OU or domain object in the Active Directory Users and Computers Microsoft Management Console (MMC).

• Although it would seem that because Microsoft didn't devote any bullet points for Group Policy on the Skills Measured by Exam 70-290 listing on its website, it might not be covered on the exam. This is far from the case. Historically, Group Policy has been featured on the 70-290 exams, and it is an essential part of your duties as a system administrator.