Implementing a Group Policy Infrastructure - PowerShell Flashcards

Implementing and Administering Group Policy Objects (GPOs) Group Policy Scope and Processing Troubleshooting Policy Application

1
Q

What does the following PowerShell CmdLet Do?

Backup-GPO

A

Backs up one GPO or all the GPOs in a domain.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What does the following PowerShell CmdLet Do?

Copy-GPO

A

Copies a GPO.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What does the following PowerShell CmdLet Do?

Get-GPInheritance

A

Retrieves Group Policy inheritance information for a specified domain or OU.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What does the following PowerShell CmdLet Do?

Get-GPO

A

Gets one GPO or all the GPOs in a domain.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What does the following PowerShell CmdLet Do?

Get-GPOReport

A

Generates a report either in XML or HTML format for a specified GPO or for all GPOs in a domain.

If you do not specify a path for a file to be created it displays the xml or html on screen

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What does the following PowerShell CmdLet Do?

Get-GPPermission

A

Gets the permission level for one or more security principals on a specified GPO.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What does the following PowerShell CmdLet Do?

Get-GPPrefRegistryValue

A

Retrieves one or more Registry preference items under either Computer Configuration or User Configuration in a GPO.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What does the following PowerShell CmdLet Do?

Get-GPRegistryValue

A

Retrieves one or more registry-based policy settings under either Computer Configuration or User Configuration in a GPO.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What does the following PowerShell CmdLet Do?

Get-GPResultantSetOfPolicy

A

Outputs the Resultant Set of Policy (RSoP) information for a user, a computer, or both to a file.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What does the following PowerShell CmdLet Do?

Get-GPStarterGPO

A

Gets one Starter GPO or all Starter GPOs in a domain.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What does the following PowerShell CmdLet Do?

Import-GPO

A

Imports the Group Policy settings from a backed-up GPO into a specified GPO.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does the following PowerShell CmdLet Do?

Invoke-GPUpdate

A

Schedule a remote Group Policy refresh (gpupdate) on the specified computer.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What does the following PowerShell CmdLet Do?

New-GPLink

A

Links a GPO to a site, domain, or organizational unit (OU).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What does the following PowerShell CmdLet Do?

New-GPO

A

Creates a new GPO.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What does the following PowerShell CmdLet Do?

New-GPStarterGPO

A

Creates a new Starter GPO.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What does the following PowerShell CmdLet Do?

Remove-GPLink

A

Removes a GPO link from a site, domain or OU.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What does the following PowerShell CmdLet Do?

Remove-GPO

A

Deletes a GPO.

18
Q

What does the following PowerShell CmdLet Do?

Remove-GPPrefRegistryValue

A

Removes one or more Registry preference items from either Computer Configuration or User Configuration in a GPO.

19
Q

What does the following PowerShell CmdLet Do?

Remove-GPRegistryValue

A

Removes one or more registry-based policy settings from either Computer Configuration or User Configuration in a GPO.

20
Q

What does the following PowerShell CmdLet Do?

Rename-GPO

A

Assigns a new display name to a GPO.

21
Q

What does the following PowerShell CmdLet Do?

Restore-GPO

A

Restores one GPO or all GPOs in a domain from one or more GPO backup files.

22
Q

What does the following PowerShell CmdLet Do?

Set-GPInheritance

A

Blocks or unblocks inheritance for a specified domain or organizational unit (OU).

23
Q

What does the following PowerShell CmdLet Do?

Set-GPLink

A

Sets the properties of the specified GPO link.

24
Q

What does the following PowerShell CmdLet Do?

Set-GPPermission

A

Grants a level of permissions to a security principal for one GPO or all the GPOs in a domain.

Modifies the following permissions:

  • Security Filtering (who the policy applies to)
  • Delegation (Who can edit, read, delete, or modify security)
25
Q

What does the following PowerShell CmdLet Do?

Set-GPPrefRegistryValue

A

Configures a Registry preference item under either Computer Configuration or User Configuration in a GPO.

26
Q

What does the following PowerShell CmdLet Do?

Set-GPRegistryValue

A

Configures one or more registry-based policy settings under either Computer Configuration or User Configuration in a GPO.

27
Q

What does the following command do?

gpfixup

A

Fix domain name dependencies in Group Policy Objects and Group Policy links after a domain rename operation.

28
Q

What does the following command do?

dcgpofix

What are the switches?

A

Recreates the default Group Policy Objects (GPOs) for a domain

  • /ignoreschema
    • Ignores the version of the Active Directory® schema when you run this command. Otherwise, the command only works on the same schema version as the Windows version in which the command was shipped.
  • /target
29
Q

  1. How do you recreate the Default Domain Policy GPO?
  2. How do you recreate the Default Domain Controller Policy GPO?
A
  1. dcgpofix /target:Domain
  2. dcgpofix /target:DC
30
Q

What does the following command do?

gpresult

A

Displays the Resultant Set of Policy (RSoP) information for a remote user and computer.

/s Specifies the name or IP address of a remote computer. Do not use backslashes. The default is the local computer. /u Uses the credentials of the specified user to run the command. The default user is the user who is logged on to the computer that issues the command. /p [] Specifies the password of the user account that is provided in the /u parameter. If /p is omitted, gpresult prompts for the password. /p cannot be used with /x or /h. /user [] Specifies the remote user whose RSoP data is to be displayed. /scope {user | computer} Displays RSoP data for either the user or the computer. If /scope is omitted, gpresult displays RSoP data for both the user and the computer. [/x | /h] Saves the report in either XML (/x) or HTML (/h) format at the location and with the file name that is specified by the FILENAME parameter. Cannot be used with /u, /p, /r, /v, or /z. /f forces gpresult to overwrite the file name that is specified in the /x or /h option. /r Displays RSoP summary data. /v Displays verbose policy information. This includes detailed settings that were applied with a precedence of 1. /z Displays all available information about Group Policy. This includes detailed settings that were applied with a precedence of 1 and higher. /? Displays help at the command prompt.

31
Q

What does the following command do?

gpupdate

A

Updates Group Policy settings

32
Q

What does the following command do?

gpupdate /force

A

Reapplies all policy settings. By default, only policy settings that have changed are applied.

33
Q

What does the following command do?

gpresult /v

A

Displays verbose policy information. This includes detailed settings that were applied with a precedence of 1.

34
Q

What does the following command do?

gpresult /z

A

Displays all available information about Group Policy. This includes detailed settings that were applied with a precedence of 1 and higher.

35
Q

What does the following command do?

gpresult /v > filename.txt

A

outputs all information to a text file

36
Q

What does the following command do?

gpresult [/x or /h]

A

Saves the report in either XML (/x) or HTML (/h) format at the location and with the file name that is specified by the FILENAME parameter. Cannot be used with /u, /p, /r, /v, or /z.

37
Q

What is the order in which group policy applies?

A

L - Local

S - Site

D - Domain

OU - Organizational Unit

38
Q

When you have multiple GPOs linked in the same location, how do policies apply?

A

The are applied via Link Order (Precendence). Highest applies first. Lowest is applied last

39
Q

Where would you set permissions to let a user link Group Policy objects?

A

In the Domain Delegation

40
Q

What does enforcing a policy do?

A

Changes it ti be the last policy applied and is not blcoked from enheritance

41
Q

How would you give someone the rights to create Group Policy objects?

A

Add them to the AD Group Group Policy Creator/Owners