STEPS IN INSTALLING AND CONFIGURING GROUP POLICY

1. What are the functions of NTUSER.DAT?

This information gets its data from the Registry.

Example of settings on the local machine is as below:

2. Go to local server dashboard and Add Roles and Features. Add Group Policy Management.
3. You will be considering group policy for your domain. You may consider different domains
for different Organizational Unit (OU), i.e., group or departments in your domain. Below is
an example of screen that you may see.

4. When will you use the Default Policy? What if you need to configure a different policy for
each OU?
Default policy is a baseline that applies when we do not create any specific OU. The
configuration for a different OU is created to follow the organization unit’s needs and
requirements.

5. Create a Group Policy for an OU. For example, for the Marketing OU below:
6. In the Group Policy Editor, we may choose to configure either the group’s computer settings
or users setting.
Computer Configurations

7. State what are the differences between computer configuration and user configuration.

Computer configuration: Administrators use the computer configuration node in Group

Policy to set policies that are applied to computers, regardless of who logs onto them.

User configuration: The administrator user the user configuration node in Group Policy to
set policies that are applied to users, regardless of which computer they log on to.

The Policies setting is not optional. All users or computers will be affected by the Policies settings
while Preferences is optional and users can change the settings in the Preferences.

Policies can be set in terms of Software Settings, Windows Settings and Administrative Template.
Below are the settings that we can do in the Administrative Template.
 8. Please choose TWO policies and elaborate on the policy. Then explain the configuration
needed to set the policy. You may choose one from any of these types or both from the
same type.

Deploy desktop background wallpaper: It is for standardize the wallpaper for each
company’s belonging.

User right assignments: Allow logon locally. New users can login using the username given
by the organization.

User Configurations

9. Some organizations may have several locations, located at different area or country. Create
an OU for one of your existing OU. Below example illustrate a scenario of an organization
having a branch in London for its Marketing OU, named London Office.

10. For the new OU, create its own Group Policy Object (GPO). You may find the options of Link
to Existing GPO and Group Policy Inheritance and Delegation.

11. Explain what they are and explain when you think you will consider those three options in
your Group Policy structure.

Existing GPO: It refers to using a previously configured Group Policy Object rather than
creating a new one from scratch.

Group Policy Inheritance: It describes how GPOs are applied in a hierarchical manner,
allowing settings from higher levels to be inherited by lower-level objects.

Group Policy Delegation: This involves assigning specific permissions to users or groups to
manage or edit specific GPOs, providing a finer level of control over Group Policy
management.
The output of allowing logon user: