Lally implementing a group policy infrastructure.
Scenario, your manager asked you to use group policy to implement standardized security settings to
lock computer screens when users leave computers unattended for 10 minutes or more.
You also have to configure a policy setting that will prevent access to certain programs on local computers.
You configured group policy to lock computer screens when users leave computers unattended for 10 minutes
or more.
However, after some time, you were made aware that a critical application used by the research engineering
team fails when the screen saver starts.
An engineer asked you to prevent the GPL setting from applying to any member of the research security
group.
He also asked you to configure conference room computers to be exempt from corporate policy.
However, you must ensure that the conference room computers use a two hour time out.
Create the policies that you need to evaluate the recipes for users in your environment.
Make sure to optimize the group policy infrastructure and verify that all policies are applied as they
were intended objectives.
After completing this lab, you will be able to create and configure GPOs manage GPO Scope Exercise
Scenario.
Your manager asked you to use group policy to implement standardized security settings to lock computer
screens when users leave computers unattended for 10 minutes or more.
She also asked you to configure a policy setting that will prevent access to registry editing tools
on local computers.
The main tasks for this exercise are as follows.
One.
Create an edited GPO to link the GPO.
Three.
View the effects of the GPO settings.
Task one.
Create an editor.
GPO one on L0 and DC one from Server Manager, Open Group Policy Management Console to create a GPO
named a date and standards in the group policy objects container.
Three.
Edit the a datum standards policy and then navigate to user configuration backslash policies backslash
administrative templates backslash system for prevent users from accessing the registry by enabling
the prevent access to registry editing tools policy setting.
Five.
Navigate to the user configuration backslash policies.
Backslash Administrative Templates.
Backslash Control Panel backslash personalization folder and then configure the screen saver.
Time Out policy to 600 seconds.
Six.
Enable the password.
Protect the screen saver policy setting and then closed the group policy management editor window task
to link the GPO lengthy a datum standards GPO to the a datum dot com domain task three.
View the effects of the GPO settings one sign into l0 and cl1 as a datum backslash administrator with
the password to open control panel in Windows Firewall allow remote event log management and Windows
Management Instrumentation.
WMI traffic.
Three Sign out and then sign in as a date and backslash.
Kearney with the password.
Four Attempt to change the screen saver, wait time and resume settings.
You are prevented from doing this by group policy.
Five.
Attempt to run Registry Editor.
You are prevented from doing this by group policy results.
After completing this exercise, you should have created, edited and linked the required GPOs successfully.
Exercise two scenario You used group policy to implement standardized security settings to lock computer
screens when users leave computers unattended for 10 minutes or more.
However, after some time, an engineer informed you that a critical application used by the research
engineering team fails when the screen saver starts.
He asked you to prevent the GPL setting from applying to any member of the research security group.
He also asked you to configure conference room computers to be exempt from corporate policy.
However, you must ensure that the conference room computers always use a two hour time out.
The main tasks for this exercise are as follows.
One.
Create and link the required GPOs to verify the order of precedence.
Three.
Configure the scope of a GPO with security filtering for configure loopback processing.
Five.
Prepare for the next lab task one.
Create and link the required GPOs one on low and DC one in group policy management console.
Create a new GPO named Research Application Override that is linked to the research Oyu to configure
the screensaver time out policy setting to be disabled and then close the group policy management editor
window test to verify the order of precedence in the Group Policy Management Console Tree.
Select the research view and then click the Group Policy Inheritance Tab.
Notice that the research application override GPL has precedence over the date and standards GPO.
The Screen Saver Time Out policy setting that you just configured in the research application override
GPO will be applied after the setting in the A Date and standards GPO.
Therefore, the new setting will overwrite the standard setting and will prevail.
Screen Saver Timeout will be unavailable for users within the scope of the research application.
Override GPO.
Task three Configure the scope of a GPO with security filtering one on L0 and DC, one in group policy
management console.
Select the research application override GPO.
Notice that in the security filtering section, the GPO applies by default to all authenticated users.
Two In the security filtering section remove authenticated users and add the research group and clone
SEAL one.
Task four Configure Loopback Processing one on L0 and DC one in group policy management console.
Create a new choice named kiosks under the domain two under kiosks create a child choice named conference
rooms.
Three.
Create a new GPO named conference room settings and then link it to the conference rooms U four and
at the conference room settings GPO and then modify the screen saver timeout policy to launch the screensaver
after 120 minutes.
Five.
In the computer configuration section of the GPO, modify the configure user group policy loopback processing
mode policy setting to use merge mode results.
After completing this exercise, you should have configured the required scope of the GPO successfully.