Difference between revisions of "Windows Domain Group Policy"
From Stadm
Jump to navigationJump to search| Line 9: | Line 9: | ||
*Group Policy Objects should only be edited on Rumba, Limbo is set to pull SYSVOL data from Rumba every 5 minutes. If you make a change to Group Policy and wish to have it sync immediately run this from Limbo to pull the data from Rumba | *Group Policy Objects should only be edited on Rumba, Limbo is set to pull SYSVOL data from Rumba every 5 minutes. If you make a change to Group Policy and wish to have it sync immediately run this from Limbo to pull the data from Rumba | ||
rsync -XAavz --delete-after root@rumba:/usr/local/samba/var/locks/sysvol/ /usr/local/samba/var/locks/sysvol | rsync -XAavz --delete-after root@rumba:/usr/local/samba/var/locks/sysvol/ /usr/local/samba/var/locks/sysvol | ||
| − | *To check which domain controller you are using | + | *To check which domain controller you are using in Group Policy Management click on Domains and look at the server under "Current Domain Controller" |
[[File:AD_gpo2.png|800px|Group Policy]] | [[File:AD_gpo2.png|800px|Group Policy]] | ||
| + | *If the server is not Rumba, right click on the domain name name and click "Change Domain Controller" and change it to Rumba so we are editing GPO's on the correct server | ||
| + | [[File:AD_gpo3.png|800px|Group Policy]] | ||
==Common Group Policies== | ==Common Group Policies== | ||
*In many domain environments a lot of computers will have the same settings that have to be applied across all of them, a good example of this is networking and firewall rules | *In many domain environments a lot of computers will have the same settings that have to be applied across all of them, a good example of this is networking and firewall rules | ||
Latest revision as of 11:26, 7 July 2015
Contents
Group Policy
- Group Policy is a great way to configure commonly deployed settings to both Users and Computers, below we show some commonly used Group Policy settings and how to apply them to only certain users/groups or computers
- Open up Group Policy Management: gpmc.msc
- As shown above, all Group Policy Objects are stores in the Group Policy Objects folder where the red arrow is pointing, from there they are linked into individual Organizational Units(OU's) where the black arrows are pointing to
- You can have OU's nested inside of other OU's and apply a GPO only to the child OU by dropping it into the nested OU's folder as shown below in Common Group Policies
- Group Policy Objects should only be edited on Rumba, Limbo is set to pull SYSVOL data from Rumba every 5 minutes. If you make a change to Group Policy and wish to have it sync immediately run this from Limbo to pull the data from Rumba
rsync -XAavz --delete-after root@rumba:/usr/local/samba/var/locks/sysvol/ /usr/local/samba/var/locks/sysvol
- To check which domain controller you are using in Group Policy Management click on Domains and look at the server under "Current Domain Controller"
- If the server is not Rumba, right click on the domain name name and click "Change Domain Controller" and change it to Rumba so we are editing GPO's on the correct server
Common Group Policies
- In many domain environments a lot of computers will have the same settings that have to be applied across all of them, a good example of this is networking and firewall rules
- While we can go individually to each computer and manually type in multiple search suffixes or a firewall rule to allow Incoming Echo requests(ping) it would take forever on multiple computers, in this example we show you how to apply a Group Policy Object to a set of computers
- In the example above, the group policy "ERI Network, Firewall, and Remote Desktop Policy" is dragged and dropped into the "CCBER Computers" OU which is in the "Machines" OU. This Links the Group Policy Object to the Organizational Unit. This setting will only apply to Computers that are in the "CCBER Computers" OU, not the "Machines" OU
