Chapter 10: Managing Group Policies

Question 1

Where are GPOs stored?

Answer 1

the Active Directory database and the SYSVOL folder

Question 2

In what order are GPOs processed?

Answer 2

• Local policies
• Site policies
• Domain policies
• OU policies

Question 3

What are the two modes of GPO processing?

Answer 3

1. Foreground processing - a Group
   Policy’s computer settings will start to process during the OS startup. Once the
   user enters their username and credentials, the Group Policy’s user settings start
   to process.
2. Background processing - once login and network connections have been
   initialized. Also, once the user logs in, every 90 minutes

Question 4

What are the two forms of foreground processing?

Answer 4

1. Synchronous mode - all of the policy settings that ran in foreground mode will
   process before the user sees the desktop window
2. Asynchronous mode - the OS does not wait until Group Policy processing

Question 5

Describe loopback GPO processing

Answer 5

When we apply user configuration to a user located in the OU, it doesn’t matter which computer they log in to; their policy settings will follow them - Using loopback processing, we can force users to only have user policy settings that are linked to the OU where computers are located

Question 6

What are the two modes of loopback processing?

Answer 6

Merge and Replace

Question 7

Group Policy Best Practices

Answer 7

• Standardize settings
• Identify the best place to link the Group Policy
• Avoid mixing user settings and computer settings
• Use Group Policy enforcing and block inheritance appropriately
• Never edit default policies
• Be careful when using loopback processing - always use a separate Group
  Policy and name it correctly; use replace mode