• Shuffle
    Toggle On
    Toggle Off
  • Alphabetize
    Toggle On
    Toggle Off
  • Front First
    Toggle On
    Toggle Off
  • Both Sides
    Toggle On
    Toggle Off
  • Read
    Toggle On
    Toggle Off
Reading...
Front

How to study your flashcards.

Right/Left arrow keys: Navigate between flashcards.right arrow keyleft arrow key

Up/Down arrow keys: Flip the card between the front and back.down keyup key

H key: Show hint (3rd side).h key

A key: Read text to speech.a key

image

Play button

image

Play button

image

Progress

1/21

Click to flip

21 Cards in this Set

  • Front
  • Back
Mechanisms used to scope a GPO ?
Mechanisms used to scope a GPO:

■ The GPO link to a site, domain, or OU and whether that link is enabled
■ The Enforce option of a GPO
■ The Block Inheritance option on an OU
■ Security group filtering
■ WMI filtering
■ Policy node enabling or disabling
■ Preferences targeting
■ Loopback policy processing
A GPO can be linked to one or more Active Directory sites, domains, or OUs
A GPO can be linked to one or more Active Directory sites, domains, or OUs
you can link a GPO to the domain or to an OU by right-clicking it and choosing Link An Existing GPO
you can link a GPO to the domain or to an OU by right-clicking it and choosing Link An Existing GPO
By default, Active Directory sites are not visible in the GPME
By default, Active Directory sites are not visible in the GPME
Deleting or Disabling a GPO Link
When you right-click the GPO link a menu appears.

You can delete a GPO link by choosing Delete from the menu.

GPO Disabling: Right-click the GPO link and deselect the Link
Enabled option
To view the Precedence of GPO`s ?
Select the domain or OU and then click the Group Policy Inheritance
tab to view the precedence of each GPO.
the default domain policy processing order: site, domain, OU;
remember that domain policy settings are applied after and, therefore, take precedence over settings in local GPOs.
the default domain policy processing order: site, domain, OU;
remember that domain policy settings are applied after and, therefore, take precedence over settings in local GPOs.
Precedence of Multiple Linked Group Policy Objects
An OU, domain, or site can have more than one GPO linked to it.

In the event of multiple Group Policy objects, the objects’ link order determines their precedence.
Blocking Inheritance
domain or OU can be configured to prevent the inheritance of policy settings.

To block inheritance, right-click the domain or OU in the GPME and choose Block Inheritance.
Enforcing a GPO Link
right-click a GPO link and choose
Enforced from the context menu.

When a GPO link is set to Enforced, the
GPO takes the highest level of precedence; policy settings in that GPO will prevail over any conflicting policy settings in other GPOs.


a link that is enforced will apply to
child containers even when those containers are set to Block Inheritance.
A link that is enforced will apply to
child containers even when those containers are set to Block Inheritance.
A link that is enforced will apply to
child containers even when those containers are set to Block Inheritance.
Abbrev :ACL
Access Control List
Security Group Filtering of GPO`s: GPOs can be filtered only with global security groups—not with domain local security groups.
Security Group Filtering of GPO`s: GPOs can be filtered only with global security groups—not with domain local security groups.
Deny permissions are not exposed on the Scope tab but in the Delegation Tab
Deny permissions are not exposed on the Scope tab but in the Delegation Tab
Abbrev WMI ?
Windows Management Instrumentation
What does Windows Management Instrumentation do?
WMI can provide GPO filtering options based on properties of an object . It can enable filtering based on RAM, processor speed,
disk capacity, IP address, operating system version and service pack level, installed applications, and printer properties.
WMI filters are not processed by computers running Windows 2000
WMI filters are not processed by computers running Windows 2000
Loopback policy processing alters the default algorithm used by the Group Policy client to obtain the ordered list of GPOs that should be applied to a user’s configuration.
Instead of user configuration being determined by the User Configuration node of GPOs that are scoped to the user object, user configuration can be determined by the User Configuration node policies
of GPOs that are scoped to the computer object.
The User Group Policy Loopback Processing Mode policy,can be set to Not Configured, Enabled, or Disabled
When enabled, the User Group Policy Loopback Processing Mode policy can specify Replace or Merge mode.
CSEs apply GPOs in the following order: local GPOs, GPOs linked to the site in which a user or computer logs on, GPOs linked to the user or computer domain, and then GPOs linked to OUs. The layered application of policy settings creates the effect of policy inheritance.
CSEs apply GPOs in the following order: local GPOs, GPOs linked to the site in which a user or computer logs on, GPOs linked to the user or computer domain, and then GPOs linked to OUs. The layered application of policy settings creates the effect of policy inheritance.
A GPO link can be set to Enforced. The settings in an enforced GPO are applied to computers and users within the scope of the GPO, even if the Block Inheritance option is set.

Additionally, settings in an enforced GPO take precedence, so they will override conflicting
settings.
A GPO link can be set to Enforced. The settings in an enforced GPO are applied to computers and users within the scope of the GPO, even if the Block Inheritance option is set.

Additionally, settings in an enforced GPO take precedence, so they will override conflicting
settings.