In this video, we gonna take a look at Group Policy this will be part one. First, I’ll introduce you to GPO then we move to Local Group Policy.
-it is simply a nice UI that explains all of the different settings that you have available to you so you don’t have to memorize obscure registry locations of each individual computer and make those changes yourself and it’s even more impractical to go and change the settings on everybody’s computers.
A Group Policy Object is a group of registry settings which in seconds or minutes, could go in and make a change that could affect your entire domain or an Organizational Unit.
The policies made here only applies to this local computer. And not on other domain computers.
group policy management editor (GPME).
In this case, In this case, I’m just gonna go and connect directly from the domain controller.
And choose new, create your policy then when you’re ready and you made all the configurations settings that you need then you can link it to one of your Organizational Units.
First, let’s start small w/ Local Group Policy which only applies to the local computer.
Let’s try to limit the access of a certain user to the computer. For example, prohibit access to the control panel.
It may not take place effect immediately, if so run the command prompt and type gpupdate and it should then take effect.
Can be used on any standalone machine (in another words one is not a member of the domain) or a machine that is a domain member. The only exception would be the domain controllers because of the nature of a domain controller itself, you don’t set-up local group policies on domain controllers.
I will name it “disable local policy”.
I’m gonna look for Turn off Local Group Policy Object processing.
Enable it and then click OK.
NOTE: This policy right now is not linked, you have to link the policies in order for them to take effect.
So I’m gonna drag and link this to the Organizational Unit that I’ve made right here. Because that’s where the computer account is located. So if I go back to my local client and run gpupdate and once this policy is done processing, it should disable the processing for the local group policies because of the policy that we’ve made from the domain controller.
Note: By doing this, I have given everyone access to the control panel.
Go to the Organizational Unit that you’ve linked it to, right click on it, and then uncheck Link Enabled.
But then again, that would mean that I wont be able to access the control panel, even as an administrator.
You may click on another computer if you want to do it remotely, but for this case, I’m gonna click on Users. I’m gonna add the Administrators group to this policy.
Now to override the existing policy, click on the policy which in this case is the prohibit access to control panel.
What we did just now is called the multiple local group policy. In previous versions, there was only on local group policy, you won’t be able to add an exception policy like we did earlier.
And now we’re done with Group Policy Part one.