Understanding Group Policy

on Windows Server 2003

What we will cover:

 Group Policy Concepts

 Linking and Order of Precedence
 Group Policy Management Console
Prerequisite Knowledge
 Experience supporting Windows servers
 Experience supporting Microsoft networks
 Familiarity with the Windows server user interface
 Understanding of Active Directory concepts

Level 200
Agenda
 Windows Server 2003 Group Policy
Concepts
 Linking and Order of Precedence
 Group Policy Management Console
Windows Server 2003 Group Policy
Group Policy Concepts
 Used to manage users and computers
 Deploys Policy through Active Directory
 Applied at site, domain, and OU levels
 Group Policy is highly flexible
 Registry-based policy settings
 Security settings
 Software installation
 User Environment control
 Internet Explorer maintenance
Windows Server 2003 Group Policy
Group Policy Capabilities
 Folder redirection
 Software restriction
 Desktop configuration
 Control of Windows applications
Agenda
 Windows Server 2003 Group Policy
Concepts
 Linking and Order of Precedence
 Group Policy Management Console
Windows Server 2003 Group Policy
Group Policy Order of Precedence

Child OU Policy

Parent OU Policy

Domain Policy

Site Policy

Local Security Policy

Windows Server 2003 Group Policy
Group Policy Objects and Links
 GPOs contain policy settings
 Links define what objects the GPO will
target
 Scope of Management
 Sites, Domains, OU, OU, etc.
 Filtering can be based on links to SOM
 Group Policy Management Console
 Better illustrates the relationship between
GPOs and Links
Agenda
 Windows Server 2003 Group Policy
Concepts
 Linking and Order of Precedence
 Group Policy Management Console
Windows Server 2003 Group Policy
Group Policy Management Console
Windows Server 2003 Group Policy
Administrative Template Extension
 Used by Group Policy to configure
settings in a Group Policy Object
 Server Side Snap-in
 Loads in Group Policy Object Editor
 ADM files
 Client-Side Extension
 Writes policy settings that update registry
keys on target client computers
Windows Server 2003 Group Policy
ADM Files
 Enables configuration of policy settings
 Do not actually contain policy settings
 Policy settings are contained registry.pol
 Windows Server 2003 contains:
 System.adm
 Inetres.adm
 Conf.adm
 Wmplayer.adm
 Wuau.adm
 Location of ADM files
Windows Server 2003 Group Policy
ADM Files Walkthrough
Windows Server 2003 Group Policy
Registry.pol Files Walkthrough
demonstration
Windows Server 2003 Group
Policy

Group Policy Concepts and the GPMC

Editing Group Policy Objects
Creating and Managing Group Policies
Session Summary
 Group Policy allows you to manage and control your environment more easily
 Use the new GPMC to manage GPO’s and Security Policies
For More Information…

 Visit TechNet at www.microsoft.com/technet

 For additional information on books, courses and
other community resources that support this
session visit

www.microsoft.com/technet/tnt1-119
What is TechNet?
 Put the right answers at your fingertips
 The comprehensive collection of resources to help IT pros
plan, deploy and manage Microsoft products successfully

 Comprehensive set of resources delivered reliably every month

TechNet on CD or DVD – The trusted resource for guidance, tools and
Subscription software to efficiently evaluate, deploy and support Microsoft
technologies.
 Accessible at www.microsoft.com/technet
TechNet Web Site  Online resources and community
 Subscriber-only Online Services

 Biweekly e-newsletter
TechNet Flash
 Security updates, new resources, and special offers

TechNet Events  Briefings on the latest Microsoft products and technologies

and Webcasts  Hands-on, “how to” information

TechNet  User Groups

Communities  Managed Newsgroups