Mastering Active Directory - Second Edition

Group Policy capabilities

Group Policy can be used to perform many different tasks in an infrastructure. Here, I have listed some of these capabilities:

• Group Policy can be linked to sites, domains, and organization units. This allows us to match the Group Policy requirements with the AD structure.
• Group Policy allow us to use security filtering to target specific groups, users, or computers.
• Windows Management Instrumentation (WMI) filters are capable of filtering the AD objects based on criteria such as the OS version, roles, and system configuration. Group Policy allows us to use WMI filters for targeting.
• The Group Policy Object (GPO) status can change based on the operational requirements. If required, group policies can disable group ...