Podcast
Questions and Answers
What role does Group Policy serve in an Active Directory environment?
What role does Group Policy serve in an Active Directory environment?
Which of the following elements is NOT controlled by a Group Policy Object (GPO)?
Which of the following elements is NOT controlled by a Group Policy Object (GPO)?
Which tool is NOT typically used to create Group Policy Objects (GPOs)?
Which tool is NOT typically used to create Group Policy Objects (GPOs)?
What happens to user profile settings when Group Policy settings are applied?
What happens to user profile settings when Group Policy settings are applied?
Signup and view all the answers
Which statement about the Globally Unique Identifier (GUID) in Group Policy Objects (GPOs) is accurate?
Which statement about the Globally Unique Identifier (GUID) in Group Policy Objects (GPOs) is accurate?
Signup and view all the answers
What does it mean when a setting in the Administrative Templates is marked as 'Not Configured'?
What does it mean when a setting in the Administrative Templates is marked as 'Not Configured'?
Signup and view all the answers
In what order are Local and AD Group Policies applied?
In what order are Local and AD Group Policies applied?
Signup and view all the answers
What is the primary purpose of having Administrative Templates nodes?
What is the primary purpose of having Administrative Templates nodes?
Signup and view all the answers
What occurs when a policy setting in the User Configuration node conflicts with the Computer Configuration node setting?
What occurs when a policy setting in the User Configuration node conflicts with the Computer Configuration node setting?
Signup and view all the answers
How is cumulative inheritance relevant in Group Policy?
How is cumulative inheritance relevant in Group Policy?
Signup and view all the answers
Which of the following statements is true regarding the application of policies in different levels?
Which of the following statements is true regarding the application of policies in different levels?
Signup and view all the answers
What is the recommended action for an administrator before implementing policies in a production environment?
What is the recommended action for an administrator before implementing policies in a production environment?
Signup and view all the answers
What is a primary function of Group Policy Management Console (GPMC)?
What is a primary function of Group Policy Management Console (GPMC)?
Signup and view all the answers
Which statement accurately describes the difference between Local Group Policy and Active Directory Group Policy?
Which statement accurately describes the difference between Local Group Policy and Active Directory Group Policy?
Signup and view all the answers
In which Group Policy node would you find settings for logon/logoff scripts?
In which Group Policy node would you find settings for logon/logoff scripts?
Signup and view all the answers
How does Active Directory Group Policy affect local policies on a computer connected to a domain?
How does Active Directory Group Policy affect local policies on a computer connected to a domain?
Signup and view all the answers
Which of these GPO functions is specifically related to searching GPOs?
Which of these GPO functions is specifically related to searching GPOs?
Signup and view all the answers
What types of settings can be found in the Software Settings node?
What types of settings can be found in the Software Settings node?
Signup and view all the answers
Which of the following is NOT a capability provided by GPMC?
Which of the following is NOT a capability provided by GPMC?
Signup and view all the answers
Which additional settings are unique to User Configuration compared to Computer Configuration?
Which additional settings are unique to User Configuration compared to Computer Configuration?
Signup and view all the answers
Group Policy is used exclusively to manage only computer accounts in a network.
Group Policy is used exclusively to manage only computer accounts in a network.
Signup and view all the answers
A Group Policy Object (GPO) can control user environment settings while overriding user profile settings.
A Group Policy Object (GPO) can control user environment settings while overriding user profile settings.
Signup and view all the answers
The Globally Unique Identifier (GUID) associated with each GPO is used to identify or manage the rules and settings within the GPO.
The Globally Unique Identifier (GUID) associated with each GPO is used to identify or manage the rules and settings within the GPO.
Signup and view all the answers
Group policies for users and computers can be applied differently and do not have overlapping functionalities.
Group policies for users and computers can be applied differently and do not have overlapping functionalities.
Signup and view all the answers
Creation of Group Policy Objects (GPOs) can utilize the Active Directory Sites And Services tool (ADSS) among others.
Creation of Group Policy Objects (GPOs) can utilize the Active Directory Sites And Services tool (ADSS) among others.
Signup and view all the answers
The Local Group Policy is applied last in the order of policy application.
The Local Group Policy is applied last in the order of policy application.
Signup and view all the answers
The settings in the Administrative Templates node can only be set to Enabled or Disabled, but not Not Configured.
The settings in the Administrative Templates node can only be set to Enabled or Disabled, but not Not Configured.
Signup and view all the answers
Cumulative inheritance allows policies from child OUs to override policies from parent containers within a domain.
Cumulative inheritance allows policies from child OUs to override policies from parent containers within a domain.
Signup and view all the answers
Site Group Policies are applied after Domain policies in the order of Group Policy application.
Site Group Policies are applied after Domain policies in the order of Group Policy application.
Signup and view all the answers
If a policy is set to Disabled in the User Configuration node, it will take precedence over an Enabled setting in the Computer Configuration node.
If a policy is set to Disabled in the User Configuration node, it will take precedence over an Enabled setting in the Computer Configuration node.
Signup and view all the answers
There are over 500 available registry-based GP settings in the Administrative Templates node.
There are over 500 available registry-based GP settings in the Administrative Templates node.
Signup and view all the answers
Policies within Active Directory are not cumulative; they apply only the most recent policy rule.
Policies within Active Directory are not cumulative; they apply only the most recent policy rule.
Signup and view all the answers
GPOs can be linked to a domain using GPMC.
GPOs can be linked to a domain using GPMC.
Signup and view all the answers
Local Group Policy allows for extensive options compared to Active Directory Group Policy.
Local Group Policy allows for extensive options compared to Active Directory Group Policy.
Signup and view all the answers
Changes made in the User Configuration node are reflected in the computer's registry.
Changes made in the User Configuration node are reflected in the computer's registry.
Signup and view all the answers
Active Directory Group Policies can override Local Group Policies when a computer is connected to a domain.
Active Directory Group Policies can override Local Group Policies when a computer is connected to a domain.
Signup and view all the answers
The Group Policy Object Editor snap-in is used only for viewing GPO settings.
The Group Policy Object Editor snap-in is used only for viewing GPO settings.
Signup and view all the answers
Windows Settings under User Configuration contains nodes for System Policies and Folder Redirection.
Windows Settings under User Configuration contains nodes for System Policies and Folder Redirection.
Signup and view all the answers
The ability to back up and restore GPOs is a function of GPMC for Windows Server 2000/2012.
The ability to back up and restore GPOs is a function of GPMC for Windows Server 2000/2012.
Signup and view all the answers
Software Settings in the Computer Configuration node apply only to user-based software installations.
Software Settings in the Computer Configuration node apply only to user-based software installations.
Signup and view all the answers
Study Notes
Group Policy
- Group Policy is a feature of Microsoft Windows NT family operating systems
- It manages user and computer settings within a network
- Group Policy defines user work environment once and enforces settings continuously
- Settings can be applied to the entire organization or specific user/computer groups
- It controls the working environment of user accounts and computer accounts
- It centralizes the management and configuration of operating systems, applications, and user settings in an Active Directory environment
- It is used to restrict actions that pose security risks (e.g., blocking Task Manager, executable file downloads)
Group Policy Objects (GPOs)
- GPOs are objects that contain one or more policies
- Each GPO includes a Globally Unique Identifier (GUID)
- GPOs control computer configuration, user environment, and account policies
Operation on GPOs
- GPOs are created using tools like Active Directory Users and Computers (ADUC), Group Policy Management Console (GPMC), and Active Directory Sites and Services (ADSS)
- Linking GPOs to sites, domains, or organizational units (OUs) applies the policies
- GPOs can be edited using the Group Policy Object Editor snap-in
Types of Group Policies
- Local Group Policy: Configures a single local computer, with fewer options than Active Directory Group Policy
- Active Directory Group Policy: Controls linked objects like domains, sites, and OUs in the Active Directory. If a computer is part of a domain, Active Directory GPOs override local GPOs.
Application of GPOs and Inheritance
- Application Order: Local GPOs are applied first, followed by site GPOs, then domain policies, and finally OU policies (order 1, 2, 3, 4)
- Local policies stored locally, overriding previous policies. Policies apply downwards from parent to child containers.
- Policies are cumulative (RSoP)
Inheritance (1)
- Policies inherit from parent containers.
- If a GPO is set to Enabled or Disabled on a parent container, but not on a child container, the parent GPO is applied
- If a GPO is set to both parent and child containers with no conflicts, both are applied
- If a GPO on both parent and child container conflicts, the child GPO is applied
- If there is a conflict between a user policy and a computer policy, the computer policy prevails.
- Resultant Set of Policies (RSoP) reflects the total impact of all cumulative policies
Inheritance (2)
- Administrators can block inheritance
- If a computer is in a workgroup, only the local GPO applies.
- GPO overriding: A GPO set to "No Override" isn't overridden
- Multiple "No Override" settings: The highest GPO in the AD hierarchy takes precedence
- Policies override user configurations
User Configuration & Computer Configuration Nodes (1)
- Computer Configuration: Contains software, installation, and security settings (e.g., startup/shutdown)
- User Configuration: Contains Windows settings (e.g., startup/shutdown, logon/logoff)
- Includes Remote Installation Services, Folder Redirection, and Internet Explorer Maintenance.
- Includes software settings & windows settings placed by vendors (ISVs).
User Configuration & Computer Configuration Nodes (2)
- Administrative Templates: Registry-based settings for user environment (over 550 settings)
- Settings can be: Not Configured, Enabled, or Disabled
- Computer Configuration node settings usually override User Configuration settings
What Happens When Local and AD GPOs Conflict?
- Local GPOs are applied first
- Active Directory GPO policies are applied and override local policies in order of site, domain, OU
- Administrator must test all GPOs before implementing them in production environment.
Studying That Suits You
Use AI to generate personalized quizzes and flashcards to suit your learning preferences.
Related Documents
Description
Explore the fundamentals of Group Policy in Microsoft Windows NT operating systems. This quiz covers Group Policy Objects (GPOs), their applications, and management techniques using various tools such as Active Directory. Test your knowledge on the types of Group Policies and how they affect user and computer settings within a network.
