Create and Manage GPOs Flashcards

1
Q

Outside of an Active Directory environment, which policies take priority: Local Group Policy, Administrator/Non-Admin Policies, or User-Specific Group Policies?

A

User-specific policies takes highest priority followed by Administrator/Non-Admin policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Where are starter GPOs located within Group Policy Management?

A

Navigate to: Forest: RootDomain > Domain > Starter GPOs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How do you create a starter GPO?

A

Within GPMC, right click on Starter GPOs and select New

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

How do you configure GPO links?

A

Within GPMC, right click on OU and select “Create a GPO in this domain, and Link it here…”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How do you back up a GPO?

A

Within GPMC, navigate to: Forest: RootDomain > Domain > GPOs

Right click on GPO to be backed up and select Back Up

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How do you restore a GPO?

A

Within GPMC, navigate to:
Forest: RootDomain > Domain > GPOs

Right click on GPO and select Restore from Back up

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How do you import a GPO?

A

Within GPMC, navigate to:
Forest: RootDomain > Domain > GPOs

Right click on GPO and select Import Settings

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How do you copy/paste a GPO?

A

Within GPMC, navigate to:
Forest: RootDomain > Domain > GPOs

Right click on GPO and select Copy.

Right click on OU/GPO and select Paste

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How do you create and configure a migration table?

A
  1. Right click on Group Policy Objects and select Open Migration Table Editor.
  2. Import GPO
  3. Specify destination locations
  4. Save
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How do you reset default GPOs?

A

Run the command-line utility “dcgpofix”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How do you delegate Group Policy management?

A
  1. Within GPMC, navigate to the specific Domain and view the Delegation tab
  2. Within AD UC, right click on an OU and select Delegation Control
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Where do you go to detect health issues using the Group Policy Infrastructure Status page?

A

Within GPMC, navigate to the status tab of the Domain and select “Detect Now”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which takes precedence, an OU with disabled Inheritance or the above GPO with enforcement?

A

GPO enforcement

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How do you block inheritance on an OU?

A

Right click on OU and select “Block Inheritance”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How do you enforce a GPO?

A

Right click on GPO and select “Enforce”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How do you configure a central store?

A
  1. Create a folder named PolicyDefinitions within the \domain.com\SYSVOL\nutex.com\policies folder on any domain controller
  2. Copy the \Windows\PolicyDefinition folder from a Windows 10 computer to the SYSVOL\domain.com\policies folder on the domain controller
17
Q

What can GPO’s be linked to?

A

GPO’s can only be linked to a domain, OU, or Active Directory site

18
Q

What is the difference between a restore and an import of a GPO?

A

A GPO can only be restored from a back up that is on the same domain due to SIDs needing to match.

An imported GPO can come from any domain due to SIDs not needing to match

19
Q

What naming formats are allowed when inputting names in the Source Name column within the Migration Table Editor?

A

UPN: user@domain.com
SAM: domain\user
SID: S-1-11-111111111-111111111-1111111111-1112
DNS: domain.com\user

20
Q

What can be used to check whether GPO policies have been replicated correctly between Domain Controllers?

A

Group Policy Status report

Viewed by opening GPMC > Expand Domains > Highlight name of domain.
In right-hand pane, click on Status tab.
At bottom of page, click on Detect Now to create report.

21
Q

What PowerShell cmdlet can be used to determine the net effect of combined GPO’s and settings on an AD object (RSoP) to a file?

A

Get-GPResultanSetofPolicy cmdlet

The gpresult command-line utility performs the same function

22
Q

What PowerShell cmdlet generates a report in either XML or HTML format that describes properties and policy settings for a specified GPO or for all GPO’s in the domain?

A

Get-GPOReport

23
Q

What settings can be configured within Preferences inside of Group Policy?

A

Environment variables, registry settings, drive mapping, folder creation, folder updates, shortcuts, scheduled tasks, services settings and local users and group configurations

24
Q

What tool is used to convert .adm files to .admx files, and edit Administrative Templates?

A

ADMX Migrator tool