Lesson 16: Creating Group Policy Objects

Question 1

Group Policy

Answer 1

Mechanism for controlling and deploying OS settings to computers all over your network

Question 2

Linking

Answer 2

Associating a GPO with a specific AD DS object

Question 3

Security Filtering

Answer 3

Technique that allows you to apply GOP settings to only one or more users or groups within a container.

Question 4

GPO

Answer 4

Group Policy Object. Contain group policy settings to deploy to user and computer objects within a site, domain or organizational unit.

Question 5

Three types of GPOs

Answer 5

Local
Domain
Starter

Question 6

Local GPO

Answer 6

AKA LGPO
Allows you to create specific GPO settings for one or more local users configured on a workstation (as opposed to domain users)

Question 7

Older Windows releases (pre-vista) could support just ___ local GPO, but newer versions can support _____

Answer 7

One

Multiple local GPOs

Question 8

When a local and nonlocal (Active Directory-based) GPO have conflicting settings, what happens?

Answer 8

The nonlocal settings override the local GPO settings

Question 9

Local GPOs contain fewer _____ than domain GPOs

Answer 9

Settings / Options.
They do not support folder redirection or group policy software installation.
There are fewer security settings available.

Question 10

Domain GPOs

Answer 10

AKA Nonlocal GPOs

Created in Active Directory and are linked to sites, domains or OUs.

Question 11

Content of a nonlocal GPO is stored in which locations?

Answer 11

GPC

GPT

Question 12

GPC

Answer 12

Group Policy Container - Active Directory object that stores the properties of the GPO

Question 13

GPT

Answer 13

Group Policy Template - Located in the Policies subfolder of the SYSVOL share. Stores policy settings and script files.

Question 14

Start GPO

Answer 14

Introduced in Server 2008, template for the creation of domain GPOs based on standard collection of settings.

Question 15

Two default GPOs

Answer 15

Default domain policy
Default domain controller policy
These are set up by default when you install AD DS on Server 2012

Question 16

Each GPC contains two subcontainers. —

Answer 16

One for machine (the computer)

One for users

Question 17

What order are GPOs from multiple sources processed?

Answer 17

1. Local Policies
2. Site Policies
3. Domain Policies
4. OU Policies

Last writer wins, so OU policies override all previous, etc

Question 18

When you link multiple GPOs to a single container or object, what order is used to process the GPOs?

Answer 18

You control this from the Linked Group Policy Objects tab in Group Policy Management