1 00:00:00,420 --> 00:00:08,640 Group policy settings are presented as GP always in ADT as user interface tools but the GPO is actually 2 00:00:08,640 --> 00:00:13,840 two components a group policy container and a group policy template. 3 00:00:13,910 --> 00:00:20,340 The group policy container in an edit is object let is stored in the group policy objects contained 4 00:00:20,610 --> 00:00:26,660 within the domain name context of the directory similar to all ADT as objects. 5 00:00:26,730 --> 00:00:35,100 Each group policy container includes a globally unique identifier or grid attributes that uniquely identifies 6 00:00:35,160 --> 00:00:39,440 the object within 80 days the group policy container defiance. 7 00:00:39,450 --> 00:00:42,060 Basic attributes of the GPO. 8 00:00:42,060 --> 00:00:47,700 The settings are contained in the group policy template which is a collection of files stored in the 9 00:00:47,700 --> 00:00:57,000 Source Wall of each domain controller in the sense of all domain policies GPO grid path where GPO grid 10 00:00:57,090 --> 00:00:59,970 is a grid of the group policy container. 11 00:01:00,000 --> 00:01:06,630 When you make changes to the sentence of a GPO the changes are saved to group policy the template of 12 00:01:06,630 --> 00:01:13,530 the domain controller from which the GPO was opened which by default is a domain controller that holds 13 00:01:13,770 --> 00:01:22,380 the primary domain controller emulator operations master role or PDC by default one group policy refresh 14 00:01:22,380 --> 00:01:30,900 secures the client site extensions apply sets in a GPO only if the GPO has been updated the group policy 15 00:01:30,900 --> 00:01:39,000 client service can identify an updated GPO by its version number each GPO has a version number that 16 00:01:39,180 --> 00:01:46,050 increments each time a change is made the version number is stored to the group policy container attribute 17 00:01:46,290 --> 00:01:54,600 and in a text file named Jupiter that any in the group policy template folder group policy client knows 18 00:01:54,650 --> 00:01:59,520 the version number of each GPO it has previously applied. 19 00:01:59,580 --> 00:02:06,120 If you're in group policy a refresh group policy client discovers that the version number of the group 20 00:02:06,120 --> 00:02:13,700 policy container has been changed the client site extensions are informed that the GPO is updated. 21 00:02:13,800 --> 00:02:22,290 Now some reports about GPL replication group policy containers and group policy templates are both replicated 22 00:02:22,290 --> 00:02:26,820 between all domain controllers in a single domain in a tedious. 23 00:02:26,850 --> 00:02:32,370 However different replication mechanisms are used for these two items. 24 00:02:32,400 --> 00:02:39,720 The group policy container in aided is replicates by using a director application agent a directory 25 00:02:39,740 --> 00:02:47,610 replication agent uses a topology generated by knowledge consistency checker which you can define or 26 00:02:47,700 --> 00:02:49,170 refine manually. 27 00:02:49,170 --> 00:02:56,060 The result of the group policy continuous replicated within seconds to all domain controllers inside 28 00:02:56,370 --> 00:03:02,640 and also is replicated between sides based on the interim site application configuration. 29 00:03:02,640 --> 00:03:09,000 The group follows a template in the system all replicates by using one of the following two technologies 30 00:03:09,150 --> 00:03:16,860 the file replication service or f IRS replicates sis role in domains that are run and Windows Server 31 00:03:17,050 --> 00:03:26,580 2000 eight two thousand eight hour to 2003 and 2000 server if all domain controllers are on and Windows 32 00:03:26,580 --> 00:03:28,980 Server 2008 or higher. 33 00:03:29,190 --> 00:03:37,320 You should configure this follow replication by using distributed file system replication or D F as 34 00:03:37,470 --> 00:03:47,420 R So before 2000 eight server you use file replication service and after Server 2008 you use distributed 35 00:03:47,490 --> 00:03:52,530 file system replication which is more efficient and reliable mechanism. 36 00:03:52,530 --> 00:04:01,200 It is recommended that you use DFS SA because f far is now deprecated now because the group policy container 37 00:04:01,230 --> 00:04:04,590 and group policy template replicate separately. 38 00:04:04,590 --> 00:04:09,750 It is possible for them to become out of synchronisation for a short time. 39 00:04:09,810 --> 00:04:15,990 Typically when this happens the group policy container replicates the Domain Controller files systems 40 00:04:16,080 --> 00:04:23,070 that obtained their order list of GPO orders from the Domain Controller identifies the new group policy 41 00:04:23,070 --> 00:04:30,150 container attempt to download the group policy template and notice that the version numbers are not 42 00:04:30,150 --> 00:04:30,990 the same. 43 00:04:31,020 --> 00:04:36,030 A policy process an error is then recorded in the event logs. 44 00:04:36,030 --> 00:04:42,540 If the reverse happens and group policy template replicates to a domain controller before the group 45 00:04:42,540 --> 00:04:49,800 policy container then clients obtain in their order list of GPO was from the domain controller are not 46 00:04:50,070 --> 00:04:55,350 notified of the new GPO until the group policy container replicates.