| GPO Basics | | | | complete refresh on client. |
| Group Policy Objects (GPOs) can be used to deploy | | | | For refreshing policies on Windows XP and above, |
| a wide variety of policy control settings to large | | | | use gpupdate.exe. Some useful parameters for |
| numbers of computer accounts and user accounts. | | | | gpupdate include /force, which will force a |
| GPOs consist of two halves; User configuration | | | | reprocessing of all GPOs (without this switch |
| settings which applies to user objects in AD | | | | gpupdate only looks for changes), /target, which will |
| regardless of which compliant workstation they log | | | | update selected systems, / V verbose and / Z |
| on from, and Computer configuration settings which | | | | ‘Zuper’ verbose mode. |
| only apply to computer objects in AD. The basic use | | | | GPMC, aside from simply providing an interface to |
| of group policy is to put the settings in a GPO, and | | | | create, edit, and link GPOs, provides some |
| then link the GPO to the domain or an OU containing | | | | useful trouble-shooting functions including the ability |
| the user and computer accounts the settings should | | | | to Backup/Restore GPOs and the ability to Export |
| be applied to. | | | | Import GPOs! |
| GPOs can be created using the Group Policy | | | | Finally, if there is no other option, you can recover |
| Management Console (GPMC) Snap?in. However, on | | | | the default Domain and Domain Controller GPOs to |
| some earlier editions of Windows Server, the snap?in | | | | their factory state by using DCGPOFIX.exe. |
| is not available by default and is either added via | | | | Group Policy Settings Reference |
| service pack or a specified download. For systems | | | | The policy settings included in this spreadsheet cover |
| without the GPMC GPOs can be created and edited | | | | Windows Vista, Microsoft Windows Server 2003, |
| in Active Directory Users and Computers. | | | | Windows XP Professional, and Windows 2000. These |
| GPO information is actually split and stored in two | | | | files are used to expose policy settings when you |
| locations The Group Policy Container (GPC) and The | | | | edit Group Policy objects (GPOs). |
| Group Policy template (GPT). The Group Policy | | | | To request FREE information about Boston-area |
| container is an Active Directory container that | | | | computer training classes, visit |
| contains GPO properties, such as version information, | | | | Cindy Lazzaro |
| GPO status, and other component settings. | | | | Cindy Lazzaro has been a trainer since the early 90's, |
| The Group Policy template (GPT) is a file system | | | | starting with supporting and training on Novell |
| folder containing policy data stored in .adm files. The | | | | Netware. She took a two year hiatus from training |
| data includes security settings, script files, and | | | | starting in 2005 to work as a professional service |
| information about applications that are available for | | | | engineer for a local company specializing in installing |
| installation. The GPT is located in the system volume | | | | and supporting ISA Server and the Internet |
| folder (SysVol) in the domain Policies sub?folder. | | | | Application Gateway. Aside from the technical |
| A GPO is replicated to other domain controllers in | | | | certifications MCSE NT4 -2008 with specialties in |
| two ways. The GPC is replicated using Active | | | | SCCM, SharePoint, and exchange server, Security +, |
| Directory replication, and the GPT is replicated by | | | | A plus and Net +, she has a BA in English with a |
| the File Replication Service. Policy settings from a | | | | minor in Physics and a Masters in Management. |
| GPO are applied only when the GPC and GPT are | | | | About New Horizons Learning Centers of Boston |
| synchronized. Because Active Directory Domain | | | | New Horizons Computer Learning Centers of Boston |
| Services provide multi?master write capability, | | | | provides learning solutions that help organizations |
| conflicts could occur if a GPO is modified by two | | | | achieve business results, such as increasing |
| administrators simultaneously. To avoid conflicts, the | | | | productivity and efficiencies, driving revenue, and |
| most recent change wins by default, GPO edits are | | | | reducing costs. New Horizons provides |
| made on the PDC Emulator to prevent conflicts. | | | | customer-focused training choices in multiple formats |
| Useful Tools to Troubleshoot GPO’s | | | | and delivery methods, offering organizations and |
| Several useful tools to troubleshoot GPOs are | | | | individuals top-quality training that can be tailored to |
| available. Among them are Secedit/gpupdate, | | | | meet individual learning styles and specific needs. |
| Resultant Set of Policies and even the GPMC itself | | | | Whether you are in search of a solution for the |
| offers several valuable trouble-shooting options. | | | | complex training needs of a large, multi-location |
| Secedit /refreshpolicy {machine policy | user policy} | | | | business, or you are an individual seeking the skills to |
| can be used to refresh policies changes on Windows | | | | excel in a new or blossoming career path, New |
| 2000 systems. Add the /Force parameter to force a | | | | Horizons is your integrated learning solution. |