Configuring Group Policy Settings
Group Policy settings are easy to edit and implement. A Group
Policy Object (GPO) is a collection of Group Policy settings. Each
computer has a local GPO which is stored on the computer. In
addition, an administrator can create any number of Active Directory
based (also called nonlocal) GPOs.
To create a new Group Policy Object and create a collection of
Group Policy settings:
- Start Group Policy Management.
- Right-click on the Domain, OU, or Site you want to create a
Group Policy for and select Create and Link a GPO Here.
If you want to define a Group Policy Object which can be used in
multiple areas, you can also right-click on Group Policy
Objects and select New.
- Name your Group Policy Object. Click OK.
- Your new GPO will appear to the right. Right-click on the
GPO and select Edit.
- Group Policy Object Editor will open. You can now
begin editing the Group Policy settings you want to have applied.
- In this example, we are going to disallow Microsoft Windows
Messenger from running. Navigate to User Configuration:
Administrative Templates: Windows Components: Windows Messenger.
- You will see two Group Policy settings in this category.
Double-click on the first policy setting, Do not allow
Windows Messenger to be run.
- You have three options available: Not Configured, Enabled,
and Disabled. Not Configured allows for other GPOs to take
precedence or just allows the default action (in this case, Not
Configured would allow the user to run Windows Messenger).
Enabled turns the policy on. In this example, by enabling
the policy, you are actually not allowing Windows Messenger to
be run. Disabled specifically allows the user to run Windows
Messenger.
- Click on the Explain tab.
- The explanation provided describes what will happen with
each selection.
- Click OK.
- Continue throughout the Group Policy making any changes you
require. Once you have completed your configuration, close the
Group Policy Object Editor MMC console. You will return
to Group Policy Management.
- You can assign a GPO to an OU, Site, or Domain by right-clicking
the container and choosing Link an Existing GPO.
- Select the GPO you want to apply and click OK.
Original document:
http://www.learnthat.com/certification/learn.asp?id=424&index=7
|