Implementing a Group Policy Infrastructure - PowerShell Flashcards
Implementing and Administering Group Policy Objects (GPOs) Group Policy Scope and Processing Troubleshooting Policy Application
What does the following PowerShell CmdLet Do?
Backup-GPO
Backs up one GPO or all the GPOs in a domain.
What does the following PowerShell CmdLet Do?
Copy-GPO
Copies a GPO.
What does the following PowerShell CmdLet Do?
Get-GPInheritance
Retrieves Group Policy inheritance information for a specified domain or OU.
What does the following PowerShell CmdLet Do?
Get-GPO
Gets one GPO or all the GPOs in a domain.
What does the following PowerShell CmdLet Do?
Get-GPOReport
Generates a report either in XML or HTML format for a specified GPO or for all GPOs in a domain.
If you do not specify a path for a file to be created it displays the xml or html on screen
What does the following PowerShell CmdLet Do?
Get-GPPermission
Gets the permission level for one or more security principals on a specified GPO.
What does the following PowerShell CmdLet Do?
Get-GPPrefRegistryValue
Retrieves one or more Registry preference items under either Computer Configuration or User Configuration in a GPO.
What does the following PowerShell CmdLet Do?
Get-GPRegistryValue
Retrieves one or more registry-based policy settings under either Computer Configuration or User Configuration in a GPO.
What does the following PowerShell CmdLet Do?
Get-GPResultantSetOfPolicy
Outputs the Resultant Set of Policy (RSoP) information for a user, a computer, or both to a file.
What does the following PowerShell CmdLet Do?
Get-GPStarterGPO
Gets one Starter GPO or all Starter GPOs in a domain.
What does the following PowerShell CmdLet Do?
Import-GPO
Imports the Group Policy settings from a backed-up GPO into a specified GPO.
What does the following PowerShell CmdLet Do?
Invoke-GPUpdate
Schedule a remote Group Policy refresh (gpupdate) on the specified computer.
What does the following PowerShell CmdLet Do?
New-GPLink
Links a GPO to a site, domain, or organizational unit (OU).
What does the following PowerShell CmdLet Do?
New-GPO
Creates a new GPO.
What does the following PowerShell CmdLet Do?
New-GPStarterGPO
Creates a new Starter GPO.
What does the following PowerShell CmdLet Do?
Remove-GPLink
Removes a GPO link from a site, domain or OU.
What does the following PowerShell CmdLet Do?
Remove-GPO
Deletes a GPO.
What does the following PowerShell CmdLet Do?
Remove-GPPrefRegistryValue
Removes one or more Registry preference items from either Computer Configuration or User Configuration in a GPO.
What does the following PowerShell CmdLet Do?
Remove-GPRegistryValue
Removes one or more registry-based policy settings from either Computer Configuration or User Configuration in a GPO.
What does the following PowerShell CmdLet Do?
Rename-GPO
Assigns a new display name to a GPO.
What does the following PowerShell CmdLet Do?
Restore-GPO
Restores one GPO or all GPOs in a domain from one or more GPO backup files.
What does the following PowerShell CmdLet Do?
Set-GPInheritance
Blocks or unblocks inheritance for a specified domain or organizational unit (OU).
What does the following PowerShell CmdLet Do?
Set-GPLink
Sets the properties of the specified GPO link.
What does the following PowerShell CmdLet Do?
Set-GPPermission
Grants a level of permissions to a security principal for one GPO or all the GPOs in a domain.
Modifies the following permissions:
- Security Filtering (who the policy applies to)
- Delegation (Who can edit, read, delete, or modify security)
What does the following PowerShell CmdLet Do?
Set-GPPrefRegistryValue
Configures a Registry preference item under either Computer Configuration or User Configuration in a GPO.
What does the following PowerShell CmdLet Do?
Set-GPRegistryValue
Configures one or more registry-based policy settings under either Computer Configuration or User Configuration in a GPO.
What does the following command do?
gpfixup
Fix domain name dependencies in Group Policy Objects and Group Policy links after a domain rename operation.
What does the following command do?
dcgpofix
What are the switches?
Recreates the default Group Policy Objects (GPOs) for a domain
- /ignoreschema
- Ignores the version of the Active Directory® schema when you run this command. Otherwise, the command only works on the same schema version as the Windows version in which the command was shipped.
- /target
- How do you recreate the Default Domain Policy GPO?
- How do you recreate the Default Domain Controller Policy GPO?
- dcgpofix /target:Domain
- dcgpofix /target:DC
What does the following command do?
gpresult
Displays the Resultant Set of Policy (RSoP) information for a remote user and computer.
/s Specifies the name or IP address of a remote computer. Do not use backslashes. The default is the local computer. /u Uses the credentials of the specified user to run the command. The default user is the user who is logged on to the computer that issues the command. /p [] Specifies the password of the user account that is provided in the /u parameter. If /p is omitted, gpresult prompts for the password. /p cannot be used with /x or /h. /user [] Specifies the remote user whose RSoP data is to be displayed. /scope {user | computer} Displays RSoP data for either the user or the computer. If /scope is omitted, gpresult displays RSoP data for both the user and the computer. [/x | /h] Saves the report in either XML (/x) or HTML (/h) format at the location and with the file name that is specified by the FILENAME parameter. Cannot be used with /u, /p, /r, /v, or /z. /f forces gpresult to overwrite the file name that is specified in the /x or /h option. /r Displays RSoP summary data. /v Displays verbose policy information. This includes detailed settings that were applied with a precedence of 1. /z Displays all available information about Group Policy. This includes detailed settings that were applied with a precedence of 1 and higher. /? Displays help at the command prompt.
What does the following command do?
gpupdate
Updates Group Policy settings
What does the following command do?
gpupdate /force
Reapplies all policy settings. By default, only policy settings that have changed are applied.
What does the following command do?
gpresult /v
Displays verbose policy information. This includes detailed settings that were applied with a precedence of 1.
What does the following command do?
gpresult /z
Displays all available information about Group Policy. This includes detailed settings that were applied with a precedence of 1 and higher.
What does the following command do?
gpresult /v > filename.txt
outputs all information to a text file
What does the following command do?
gpresult [/x or /h]
Saves the report in either XML (/x) or HTML (/h) format at the location and with the file name that is specified by the FILENAME parameter. Cannot be used with /u, /p, /r, /v, or /z.
What is the order in which group policy applies?
L - Local
S - Site
D - Domain
OU - Organizational Unit
When you have multiple GPOs linked in the same location, how do policies apply?
The are applied via Link Order (Precendence). Highest applies first. Lowest is applied last
Where would you set permissions to let a user link Group Policy objects?
In the Domain Delegation
What does enforcing a policy do?
Changes it ti be the last policy applied and is not blcoked from enheritance
How would you give someone the rights to create Group Policy objects?
Add them to the AD Group Group Policy Creator/Owners