Lab A: Implementing Group

Policy/Answer Key

Exercise 1
Creating and Linking GPOs
In this exercise, you will create and link GPOs to your ComputerName
organizational unit.
Task 1
! Link a Standard Desktop GPO
1. In Group Policy Management, in the console tree, right-click
nwtraders.msft/Locations/ComputerName, and then click Link an Existing
GPO.
2. In the Select GPO dialog box, in the Group Policy objects box, click
ComputerName Standard Desktop, and then click OK.

Task 2
! Create and link a Folder Redirection GPO
1. In Group Policy Management, in the console tree, right-click
nwtraders.msft/Locations/ComputerName/Users, and then click Create and
Link a GPO here.
2. In the New GPO dialog box, type ComputerName Folder Redirection and
then click OK.

Task 3
! Create and link a Scripts GPO
1. In Group Policy Management, in the console tree, right-click
nwtraders.msft/Locations/ComputerName/Users, and then click Create and
Link a GPO here.
2. In the New GPO dialog box, type ComputerName Scripts and then click
OK.

Task 4
! Create and link a Proxy Settings GPO
1. In Group Policy Management, in the console tree, right-click
nwtraders.msft/Locations/ComputerName/Computers/Desktops, and then
click Create and Link a GPO here.
2. In the New GPO dialog box, type ComputerName Proxy Settings and then
click OK.
2 Lab A: Implementing Group Policy/Answer Key

Exercise 2
Filtering the Deployment of a GPO
In this exercise, you will set Deny permissions for all temporary employees of
Northwind Traders so that the ComputerName Folder Redirection GPO is not
applied to them.
Task 1
! Configure filtering of a GPO for a group.
1. In Group Policy Management, in the console tree, browse to
nwtraders.msft/Locations/ComputerName/Users, and then click
ComputerName Folder Redirection.
2. In the details pane, on the Scope tab, add the group DL Temp Employees.
3. On the Delegation tab, click Advanced.
4. In the Security Settings dialog box, under Group or user names, click DL
Temp Employees.
5. Under Permissions for DL Temp Employees, select the Deny check box
next to Apply Group Policy, and then click OK.
6. In the message box, click Yes.

Exercise 3
Configuring the Enforcement of GPOs
In this exercise, you will configure GPOs to be enforced throughout your
organizational unit hierarchy.
Task 1
! Set the Enforced option on a GPO link
1. In Group Policy Management, in the console tree, browse to
nwtraders.msft/Locations/ComputerName.
2. Right-click ComputerName Standard Desktop, and then click Enforced.

Task 2
! Set the Enforced option on a GPO link
1. In Group Policy Management, in the console tree, browse to
nwtraders.msft/Locations/ComputerName/Computers/Desktops.
2. Right-click ComputerName Proxy Settings, and then click Enforced

Exercise 4
Configuring the Blocking of GPOs
In this exercise, you will block inheritance of GPOs throughout your
organizational unit hierarchy.
Task 1
! Set the Block Policy inheritance option on an organizational unit
1. In Group Policy Management, in the console tree, browse to
nwtraders.msft/Locations/ComputerName/Computers/Laptops.
2. Right-click Laptops, and then click Block Inheritance.