book

Windows® Group Policy Administrators Pocket Consultant

by William R. Stanek

February 2009

Intermediate to advanced

336 pages

9h 56m

English

Microsoft Press

Read now

Unlock full access

Who Is This Book For?
Group Policy Preferences and Settings

Global Group PolicyLocal Group Policy
Working with Group PolicyGroup Policy Administration ToolsGraphical Administration ToolsCommand-Line Tools
Keeping Group Policy Up to DateCore Process ChangesPolicy ChangesSYSVOL ChangesReplication Changes
Policy Sets Within GPOsGPO TypesGPO LinksConnecting to and Working with GPOs
Working with the Default Domain Policy GPOWorking with the Default Domain Controllers Policy GPO
Using Policy Settings for AdministrationUsing Policy Preference for AdministrationChoosing Between Preferences and SettingsControlling Device InstallationControlling Files and FoldersControlling Internet ExplorerControlling Power OptionsControlling PrintersControlling Registry Keys and ValuesControlling the Start MenuControlling System ServicesControlling Users and Groups
Understanding Resultant Set of Policy
Working with Top-Level LGPOsWorking with Other LGPOs
Working with GPOs in Sites, Domains, and OUsAccessing Additional ForestsShowing Sites in Connected ForestsAccessing Additional DomainsSetting Domain Controller Focus Options
Determining and Assigning GPO Creation RightsDetermining Group Policy Management PrivilegesDelegating Control for Working with GPOsDelegating Authority for Managing Links and RSoP
Using Starter GPOsCreating and Linking GPOsCreating and Linking GPOs for SitesCreating and Linking GPOs for DomainsCreating and then Linking a GPO for a DomainCreating and Linking a Domain GPO as a Single OperationCreating and Linking GPOs for OUsCreating OUS in the GPMCCreating and then Linking a GPO for an OuCreating and Linking an OU GPO as a Single OperationDetermining Where a GPO Is LinkedEnabling and Disabling GPOsEnabling and Disabling GPO LinksRemoving a GPO LinkDeleting GPOs
Configuring Management Actions and Editing StatesUsing the Create, Replace, Update, and Delete ActionsManaging Editing StatesControlling Preference ItemsManaging Precedence and ProcessingSetting the Security ContextRemoving Preference ItemsApplying Preference Items During RefreshUsing Item-Level Targeting
Using Change ControlConnecting to and Using AGPMManaging GPOs with Change ControlDelegating Change Control PrivilegesManaging Workflow and E-mail Notification
Using GPO TemplatesCreating GPO TemplatesManaging GPO TemplatesDelegating Privileges for GPO TemplatesCreating Controlled GPOsCreating GPOs with No Approval RequiredCreating GPOs with Approval RequiredControlling GPOsControlling GPOs with PermissionsControlling GPOs Without PermissionsImporting GPOs from ProductionChecking Out, Editing, and Checking In Controlled GPOsDeploying Controlled GPOsDeploying a GPO with PermissionsDeploying a GPO Without PermissionsIdentifying Differences in GPOsReviewing GPO LinksLabeling and Renaming Controlled GPOsUncontrolling GPOsDeleting Controlled GPOsDeleting a GPO with PermissionsDeleting a GPO Without PermissionsRestoring or Destroying Controlled GPOsRestoring or Destroying Items with PermissionsRestoring or Destroying Items Without Permissions
Working with GPO HistoryPreventing or Enabling Deletion of History VersionsRolling Back to a Previous Version of a GPO
Finding Policy SettingsFiltering Techniques for Policy SettingsFiltering Policy Settings
Search Techniques for Policy Objects, Links, and SettingsPerforming Searches for GPOs
Security Group FilteringExamining Security Group FiltersApplying Security Group Filters
Creating WMI QueriesManaging WMI FiltersCreating a WMI FilterViewing and Editing WMI FiltersApplying or Removing a WMI Filter
Migrating the SYSVOLSYSVOL Migration EssentialsChecking the SYSVOL Replication StatusPerforming the SYSVOL MigrationStep 1: Migrating to the prepared StateStep 2: Migrating to the redirected StateStep 3: Migrating to the Eliminated State
Managing SYSVOL StorageManaging Storage Quotas for DFS replicationRelocating the Staging FolderIdentifying Replication PartnersRebuilding the SYSVOL
Generating Replication Health ReportsPerforming Propagation TestsGenerating Propagation Reports
Managing Group Policy InheritanceChanging Link Order and PrecedenceOverriding InheritanceBlocking InheritanceEnforcing Inheritance
Policy Processing and Refresh EssentialsPolicy Processing and Refresh ExceptionsRefreshing Group Policy ManuallyChanging the Refresh IntervalModifying GPO ProcessingConfiguring Loopback Processing
Slow-Link Detection EssentialsConfiguring Slow-Link Detection and Policy ProcessingConfiguring Slow-Link and Background Policy Processing
Testing Implementation and Configuration ScenariosDetermining Effective Settings and Last Refresh
Growing Your Enterprise Policy ConfigurationPolicy Processing for Thin Clients, Terminal Services, and Cloud ComputingPolicy Processing Across Forests
Examining Group Policy ContainersExamining Group Policy TemplatesUnderstanding GPC and GPT Processing
Copying GPOsImporting GPOsMigrating GPOs
Backing Up GPOsRestoring GPOsBacking Up and Restoring Starter GPOsBacking Up and Restoring WMI FiltersBacking Up and Restoring the AGPM ArchiveRecovering the Default GPOs
Diagnosing Group Policy: The BasicsCommon Problems with Group PolicyDiagnosing Group Policy IssuesRestoring the Default Policy GPOsExamining Group Policy Health
Installing the Remote Server Administration Tools on Windows VistaConfiguring and Selecting Remote Server Administration ToolsRemoving the Remote Server Administration Tools
Installing the Preference Extensions on Windows VistaInstalling the Preference Extensions on Windows XP and Windows Server 2003
Performing a Server Installation of AGPMPerforming a Client Installation of AGPMMaking the Agpm.admx Template AvailableConfiguring Group Policy to Support AGPM

Content preview from Windows® Group Policy Administrators Pocket Consultant

Backing Up and Restoring GPOs

Just as you back up other types of critical data, you should back up your GPOs. The GPMC provides separate procedures for backing up production GPOs, starter GPOs, and WMI filters.

Real World

As discussed in Chapter 4, using change control protects your GPOs in many ways. Change control archives copies of all your controlled GPOs. If you delete a GPO, the deleted GPO is moved to a recycle bin from which it can be recovered later. When you are working with a GPO’s history, you can view unique versions and restore the archived copy of a GPO to a particular version simply by right-clicking the version to restore and selecting Deploy. You can also mark unique versions of a GPO so that they cannot be deleted. To do this, ...