Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

group policy


  • Please log in to reply
2 replies to this topic

#1 trevorcork

trevorcork

  • Members
  • 359 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Ireland
  • Local time:06:20 PM

Posted 17 February 2015 - 09:13 AM

hi i am a junior tech trying to learn as much as i can,can ye send me some links about group policy,i want to know in server management how do i set it up etc



BC AdBot (Login to Remove)

 


#2 trevorcork

trevorcork
  • Topic Starter

  • Members
  • 359 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Ireland
  • Local time:06:20 PM

Posted 17 February 2015 - 09:25 AM

basically i want to know what steps to follow to assign group policy in AD and to lock computers and users down



#3 JohnnyJammer

JohnnyJammer

  • Members
  • 1,117 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:QLD Australia
  • Local time:09:20 AM

Posted 17 February 2015 - 10:47 PM

Best thing to do would eb create a virtual server and a virtual machine (Windows 7) and do some testing when you apply GPO's using the gpms.msc colsole.

 

Just remember to use the correct GPO for the target, so if you want to stop a user doing certain things then its a user policy.

If the computer needs to have certain ports open then it would be a computer policy.

Computer policies are applied when the computer starts, user policies are applied when the user logs on (Generally speaking).

 

When you need to check if the polies worked or failed you can run the command rsop.msc.

GPRESULT is another command line tool for checking GPO's but GPO's are the sort of thing you need to have a crack at locally before applying to a wider audience.

 

You can check the local GPO on your computer by runnign the gpedit.msc command, note the gpmc.msc is for Domain Controllers or using RAT (Remote Administror Tool)






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users