book

Windows® Group Policy Administrators Pocket Consultant

by William R. Stanek

February 2009

Intermediate to advanced

336 pages

9h 56m

English

Microsoft Press

Read now

Unlock full access

Who Is This Book For?
Group Policy Preferences and Settings

Global Group PolicyLocal Group Policy
Working with Group PolicyGroup Policy Administration ToolsGraphical Administration ToolsCommand-Line Tools
Keeping Group Policy Up to DateCore Process ChangesPolicy ChangesSYSVOL ChangesReplication Changes
Policy Sets Within GPOsGPO TypesGPO LinksConnecting to and Working with GPOs
Working with the Default Domain Policy GPOWorking with the Default Domain Controllers Policy GPO
Using Policy Settings for AdministrationUsing Policy Preference for AdministrationChoosing Between Preferences and SettingsControlling Device InstallationControlling Files and FoldersControlling Internet ExplorerControlling Power OptionsControlling PrintersControlling Registry Keys and ValuesControlling the Start MenuControlling System ServicesControlling Users and Groups
Understanding Resultant Set of Policy
Working with Top-Level LGPOsWorking with Other LGPOs
Working with GPOs in Sites, Domains, and OUsAccessing Additional ForestsShowing Sites in Connected ForestsAccessing Additional DomainsSetting Domain Controller Focus Options
Determining and Assigning GPO Creation RightsDetermining Group Policy Management PrivilegesDelegating Control for Working with GPOsDelegating Authority for Managing Links and RSoP
Using Starter GPOsCreating and Linking GPOsCreating and Linking GPOs for SitesCreating and Linking GPOs for DomainsCreating and then Linking a GPO for a DomainCreating and Linking a Domain GPO as a Single OperationCreating and Linking GPOs for OUsCreating OUS in the GPMCCreating and then Linking a GPO for an OuCreating and Linking an OU GPO as a Single OperationDetermining Where a GPO Is LinkedEnabling and Disabling GPOsEnabling and Disabling GPO LinksRemoving a GPO LinkDeleting GPOs
Configuring Management Actions and Editing StatesUsing the Create, Replace, Update, and Delete ActionsManaging Editing StatesControlling Preference ItemsManaging Precedence and ProcessingSetting the Security ContextRemoving Preference ItemsApplying Preference Items During RefreshUsing Item-Level Targeting
Using Change ControlConnecting to and Using AGPMManaging GPOs with Change ControlDelegating Change Control PrivilegesManaging Workflow and E-mail Notification
Using GPO TemplatesCreating GPO TemplatesManaging GPO TemplatesDelegating Privileges for GPO TemplatesCreating Controlled GPOsCreating GPOs with No Approval RequiredCreating GPOs with Approval RequiredControlling GPOsControlling GPOs with PermissionsControlling GPOs Without PermissionsImporting GPOs from ProductionChecking Out, Editing, and Checking In Controlled GPOsDeploying Controlled GPOsDeploying a GPO with PermissionsDeploying a GPO Without PermissionsIdentifying Differences in GPOsReviewing GPO LinksLabeling and Renaming Controlled GPOsUncontrolling GPOsDeleting Controlled GPOsDeleting a GPO with PermissionsDeleting a GPO Without PermissionsRestoring or Destroying Controlled GPOsRestoring or Destroying Items with PermissionsRestoring or Destroying Items Without Permissions
Working with GPO HistoryPreventing or Enabling Deletion of History VersionsRolling Back to a Previous Version of a GPO
Finding Policy SettingsFiltering Techniques for Policy SettingsFiltering Policy Settings
Search Techniques for Policy Objects, Links, and SettingsPerforming Searches for GPOs
Security Group FilteringExamining Security Group FiltersApplying Security Group Filters
Creating WMI QueriesManaging WMI FiltersCreating a WMI FilterViewing and Editing WMI FiltersApplying or Removing a WMI Filter
Migrating the SYSVOLSYSVOL Migration EssentialsChecking the SYSVOL Replication StatusPerforming the SYSVOL MigrationStep 1: Migrating to the prepared StateStep 2: Migrating to the redirected StateStep 3: Migrating to the Eliminated State
Managing SYSVOL StorageManaging Storage Quotas for DFS replicationRelocating the Staging FolderIdentifying Replication PartnersRebuilding the SYSVOL
Generating Replication Health ReportsPerforming Propagation TestsGenerating Propagation Reports
Managing Group Policy InheritanceChanging Link Order and PrecedenceOverriding InheritanceBlocking InheritanceEnforcing Inheritance
Policy Processing and Refresh EssentialsPolicy Processing and Refresh ExceptionsRefreshing Group Policy ManuallyChanging the Refresh IntervalModifying GPO ProcessingConfiguring Loopback Processing
Slow-Link Detection EssentialsConfiguring Slow-Link Detection and Policy ProcessingConfiguring Slow-Link and Background Policy Processing
Testing Implementation and Configuration ScenariosDetermining Effective Settings and Last Refresh
Growing Your Enterprise Policy ConfigurationPolicy Processing for Thin Clients, Terminal Services, and Cloud ComputingPolicy Processing Across Forests
Examining Group Policy ContainersExamining Group Policy TemplatesUnderstanding GPC and GPT Processing
Copying GPOsImporting GPOsMigrating GPOs
Backing Up GPOsRestoring GPOsBacking Up and Restoring Starter GPOsBacking Up and Restoring WMI FiltersBacking Up and Restoring the AGPM ArchiveRecovering the Default GPOs
Diagnosing Group Policy: The BasicsCommon Problems with Group PolicyDiagnosing Group Policy IssuesRestoring the Default Policy GPOsExamining Group Policy Health
Installing the Remote Server Administration Tools on Windows VistaConfiguring and Selecting Remote Server Administration ToolsRemoving the Remote Server Administration Tools
Installing the Preference Extensions on Windows VistaInstalling the Preference Extensions on Windows XP and Windows Server 2003
Performing a Server Installation of AGPMPerforming a Client Installation of AGPMMaking the Agpm.admx Template AvailableConfiguring Group Policy to Support AGPM

Content preview from Windows® Group Policy Administrators Pocket Consultant

Installing Advanced Group Policy Management

Advanced Group Policy Management (AGPM) is a set of extensions for the Group Policy Management Console that includes advanced features that allow you to:

Archive and edit GPOs offline.
Delegate different levels of permissions for Group Policy administrators.
Perform change management of GPOs by using check-in and check-out capabilities.
Track workflow and perform reporting on GPOs.
Roll back and roll forward changes to archived GPOs.
Maintain a recycle bin of deleted GPOs and recover GPOs and GPO links from this recycle bin.

Note

At the time of this writing, AGPM is only available through the Microsoft desktop Optimization Pack (MDOP) for Software Assurance, which also includes Microsoft Application Virtualization, ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Start your free trial

Active Directory® Administrator's Pocket Consultant

William Stanek

Microsoft® Windows® Group Policy Guide

The Microsoft Group Policy Team, Darren Mar-Elia, Derek Melber, William R. Stanek

Windows® Group Policy Resource Kit: Windows Server® 2008 and Windows Vista®

Derek Melber

Windows 10 for Enterprise Administrators

Jeff Stokes, Manuel Singer, Richard Diver

Publisher Resources

ISBN: 9780735626768Catalog Page Errata