Group Policy Object 1

What is mean Group policy?

Group policies are collections of user and computer configuration settings that can be linked to Local Computers, Sites, Domains, and OUs to specify the behavior of users’ desktops.

What is LSDOU?

Its group policy inheritance model, where the policies are applied to Local machines, Sites, Domains and Organizational Units.

How can you find the client, last modified Group policy applied or not?

Through Gpresult -z (or) RSOP

How frequently is the client policy refreshed?

90 minutes give or take.

Where is secedit?

 It’s now gpupdate.

What is NO Override policy?

It is force to apply the policy.

In case the child organization unit configured with Block policy inheritance,

No override policy will force to apply the policy

Why doesn’t LSDOU work under Windows NT?

If the NTConfig.pol file exists, it has the highest priority among the numerous policies.

What is the default group policies store location?

%SystemRoot%System32\GroupPolicy

What are GPT and GPC?

Group policy template and group policy container.

Where is GPT stored?

%SystemRoot%\SYSVOL\sysvol\domainname\Policies\GUID

How to take the group policy backup?

Through the Group Policy Management Console we can take the backup.

Default Domain Policy:

This policy is linked to the Domain and its settings affect all users and computers in the Domain.

Default Domain Controllers Policy:

This Policy is linked to the Domain Controllers all and it affects all domain controllers with in this object. As domain controllers are added to the domain, they are automatically placed in this OU and are affected by any settings applied with this policy.

What are the Software Restriction Rules?

There are four rules are there they are...

ü  Hash Rule

ü  Certificate Rule

ü  Internet Zone Rule

ü  Path Rule

Resultant Set of Policy Wizard:

There are Two Modes within RSOP that allow the previous functionality. These modes are as follows

Planning Mode

Logging Mode

Planning Mode:

This mode allows administrators to simulate the effect of policy settings prior to implementing them on a computer or user. This mode is beneficial when planning for growth or changes to your organizations. You can use planning mode to test the effects to changes to group policy on your organization prior to deployment in addition you can use planning mode to simulate the results of a slow link on a GPO in to simulating the loop back process..

Logging Mode:

This mode queries existing policies in the hierarchy that are linked to sites, domains, domain controllers and Organization units. This mode is useful for documenting and understanding how companioned policies are affecting users and computers. The results are returned in an MMC window that can be saved for later reference.

Group Policy Slow Link Detection?  

  The group policy service determines link by using the Network Location Awareness (NLP) services to sample the current TCP traffic, between the client and the domain controller. This sampling occurs during the preprocessing phase of group policy, when the group policy service relies on communicating with a domain controller to retrieve computer and user specific information and group policy object within scope of the computer or user. The GPO service asks the NLP service to start sampling TCP bandwidth on the network interface that hosts the domain controller. Soon after the group policy service discovers a domain controller. The group policy service continues through the preprocessing phase by communicating with the domain controller to discover the role of the current computer (member or domain controller) the logged on user, and group policy objects within scope of the computer or user, then the group policy service requests the NLA service to stop sampling the traffic and provide an estimated bandwidth between the computer and the domain controller based on the sampling: group policy considers a link slow when the NLA service sampling is lower than 500kbps. Administrators can use a policy setting to define a slow link for the purpose of applying group policy.