1 00:00:07,270 --> 00:00:08,380 Exercise one. 2 00:00:08,440 --> 00:00:10,660 Creating and Configuring GPOs. 3 00:00:11,530 --> 00:00:19,870 Task one Create an editor GPO one on L0 and DC one from server manager, Click Tools and then click 4 00:00:19,870 --> 00:00:21,190 group policy management. 5 00:00:22,060 --> 00:00:25,810 Two If necessary, switch to the group policy management window. 6 00:00:26,650 --> 00:00:34,090 Three In Group Policy Management console in the navigation pane expand forest a data imdb.com domains 7 00:00:34,090 --> 00:00:38,140 and a data imdb.com and then click the group policy objects container. 8 00:00:39,040 --> 00:00:44,320 Four in the navigation pane right click the group policy objects container and then click new. 9 00:00:45,160 --> 00:00:49,420 Five in the name text box, type a date and standards and then click okay. 10 00:00:50,290 --> 00:00:57,040 Six In the details pane right click the A Datum Standards Group Policy Object GPL and then click edit 11 00:00:57,940 --> 00:01:04,090 seven in the group policy management editor window in the navigation pane, expand user configuration, 12 00:01:04,240 --> 00:01:08,470 expand policies, expand administrative templates, and then click system. 13 00:01:09,310 --> 00:01:13,690 Eight Double Click to prevent access to registry editing tools policy setting. 14 00:01:14,530 --> 00:01:20,740 Nine In the Prevent Access to Registry Editing Tools, dialog box, click enabled and then click okay. 15 00:01:21,550 --> 00:01:28,330 Ten In the navigation pane, expand user configuration, expand policies, expand administrative templates, 16 00:01:28,330 --> 00:01:31,510 expand control panel, and then click personalization. 17 00:01:32,320 --> 00:01:37,150 11 In the details pane double click the screen saver time out policy setting. 18 00:01:37,960 --> 00:01:45,250 12 In the Screen Saver Timeout Dialog Box Click enabled in the seconds Text box type 600 and then click 19 00:01:45,250 --> 00:01:53,470 okay 13 double click the password, protect the screen saver policy setting 14 in the password, protect 20 00:01:53,470 --> 00:01:57,430 the screen saver dialog box, click enabled and then click, okay. 21 00:01:58,330 --> 00:02:07,270 15 Close the group policy Management Editor Window Task to link the GPO one in the Group Policy Management 22 00:02:07,270 --> 00:02:14,080 Window in the navigation pane right click the A data incom domain and then click link an existing GPO 23 00:02:14,890 --> 00:02:20,110 two in the select GPO Dialog Box, Click Add Date and standards and then click okay. 24 00:02:20,920 --> 00:02:25,380 Task three View the effects of the GPO settings one. 25 00:02:25,420 --> 00:02:32,320 Switch to L0 and SEAL one and then sign in as a data and backslash administrator with the password to 26 00:02:32,350 --> 00:02:34,930 right click start and then Click Control Panel. 27 00:02:35,820 --> 00:02:36,330 Three. 28 00:02:36,420 --> 00:02:40,650 Click System and security and then click allow an app through Windows Firewall. 29 00:02:41,560 --> 00:02:43,630 For in the allowed apps and features list. 30 00:02:43,720 --> 00:02:46,650 Select the following checkboxes and then click okay. 31 00:02:47,470 --> 00:02:53,290 All remote event log management all windows management instrumentation WMI. 32 00:02:54,160 --> 00:02:58,660 Five Sign out and then sign in as a date and backslash kani with the password. 33 00:03:08,280 --> 00:03:08,790 Six. 34 00:03:09,060 --> 00:03:12,990 Click start type, screen saver and then click change screen saver. 35 00:03:13,860 --> 00:03:16,320 It may take a few minutes for the option to appear. 36 00:03:17,220 --> 00:03:20,130 Seven in the Screen Saver Settings Dialog Box. 37 00:03:20,250 --> 00:03:22,000 Notice that the wait option is dimmed. 38 00:03:22,020 --> 00:03:23,490 You cannot change the time out. 39 00:03:24,360 --> 00:03:30,090 Notice that the on resume display log on screen option is selected and dimmed and that you cannot change 40 00:03:30,090 --> 00:03:35,940 the settings if the on resume display log on screen option is not selected and dimmed. 41 00:03:36,090 --> 00:03:37,800 Then perform the following steps. 42 00:03:38,670 --> 00:03:41,040 A right click start and then click run. 43 00:03:41,880 --> 00:03:47,640 Be in the run dialog box in the open text box type update slash force and then click. 44 00:03:47,640 --> 00:03:49,500 Okay, see. 45 00:03:49,530 --> 00:03:51,540 Click start type, screen saver. 46 00:03:51,540 --> 00:03:52,530 And then click change. 47 00:03:52,530 --> 00:03:53,400 Screen Saver. 48 00:03:54,270 --> 00:03:54,600 Eight. 49 00:03:54,870 --> 00:03:55,200 Click. 50 00:03:55,200 --> 00:03:55,680 Okay. 51 00:03:56,520 --> 00:03:57,040 Nine. 52 00:03:57,090 --> 00:03:58,110 Right click start. 53 00:03:58,110 --> 00:03:59,190 And then click Run. 54 00:03:59,970 --> 00:04:00,360 Ten. 55 00:04:00,360 --> 00:04:03,660 In the run dialog box in the open text box type. 56 00:04:03,660 --> 00:04:04,980 Reset it and then click. 57 00:04:04,980 --> 00:04:05,490 Okay. 58 00:04:06,300 --> 00:04:09,540 11 in the Registry Editor Dialog Box click. 59 00:04:09,540 --> 00:04:10,020 Okay. 60 00:04:10,850 --> 00:04:13,550 Exercise two Managing Scope. 61 00:04:14,420 --> 00:04:15,180 Task one. 62 00:04:15,200 --> 00:04:23,540 Create and link the required GPOs one on low and DC one in group policy management console in the navigation 63 00:04:23,540 --> 00:04:25,040 pane if necessary. 64 00:04:25,040 --> 00:04:33,230 Expand forest a data cnn.com, expand domains, expand a datacom, and then click research to right 65 00:04:33,230 --> 00:04:39,350 click the research organizational unit or you and then click create a GPO in this domain and link it 66 00:04:39,350 --> 00:04:39,710 here. 67 00:04:40,620 --> 00:04:47,310 Three in the new GPIO dialog box in the name text box type research application override and then click 68 00:04:47,310 --> 00:04:54,480 okay for it in the details pane right click the research application override GPO and then click edit 69 00:04:55,380 --> 00:04:57,030 five in the console tree. 70 00:04:57,060 --> 00:05:03,660 Expand user configuration, expand policies, expand administrative templates, expand control panel 71 00:05:03,660 --> 00:05:11,850 and then click personalization six double click the screen saver, time out policy setting, seven click 72 00:05:11,850 --> 00:05:13,620 disabled and then click okay. 73 00:05:14,450 --> 00:05:22,100 Eight closed the group policy management editor window test to verify the order of precedence in the 74 00:05:22,100 --> 00:05:24,290 group policy management console tree. 75 00:05:24,320 --> 00:05:28,250 Click the research OAU and then click the Group Policy Inheritance Tab. 76 00:05:29,090 --> 00:05:35,300 Notice that the research application override GPL has higher precedence than the A Datum Standards GPO. 77 00:05:36,110 --> 00:05:41,240 The screensaver time out policy setting that you just configured in the research application override 78 00:05:41,240 --> 00:05:45,200 GPO is applied after the setting in the A Datum Standards GPO. 79 00:05:46,040 --> 00:05:49,970 Therefore, the new setting will overwrite the standard setting and will prevail. 80 00:05:50,840 --> 00:05:55,730 Screensaver timeout will be unavailable for users within the scope of the research application. 81 00:05:55,730 --> 00:05:56,990 Override GPO. 82 00:05:57,800 --> 00:06:05,720 Task three Configure the scope of a GPL with security filtering one on ELO and DC, one in group policy 83 00:06:05,720 --> 00:06:11,990 management console in the navigation pane if necessary, expand the research you and then click the 84 00:06:11,990 --> 00:06:18,620 research application override GPO under the research oh you to in the group policy management console 85 00:06:18,620 --> 00:06:25,060 dialog box read the message select the do not show this message again checkbox and then click okay. 86 00:06:25,920 --> 00:06:26,370 Three. 87 00:06:26,370 --> 00:06:31,890 In the security filtering section, you will see that the GPL applies by default to all authenticated 88 00:06:31,890 --> 00:06:32,400 users. 89 00:06:33,310 --> 00:06:38,260 Four in the security filtering section, click authenticated users and then click remove. 90 00:06:39,170 --> 00:06:48,080 Five in the group policy management dialog box click okay six in the details pane click add seven in 91 00:06:48,080 --> 00:06:54,290 the select user computer or group dialog box in the Enter the object name to select examples, text 92 00:06:54,290 --> 00:07:02,900 box type research and then click okay eight in the details pane under security filtering click add nine 93 00:07:02,900 --> 00:07:10,940 in the select user computer or group dialog box Click Object Types ten in the object types dialog box, 94 00:07:11,030 --> 00:07:18,680 select the computer's checkbox and then click okay 11 in the select user computer or group dialog box 95 00:07:18,890 --> 00:07:27,140 in the Enter Object names to select examples text box type L1 C, l one and then click okay task for 96 00:07:27,230 --> 00:07:35,030 configure loopback processing one on low and DC one in group policy management console in the navigation 97 00:07:35,030 --> 00:07:42,410 pane click a data imdb.com right click a data imdb.com and then click new organizational unit two in 98 00:07:42,410 --> 00:07:50,030 the new organizational unit dialog box in the name text box type kiosks and then click okay, three 99 00:07:50,060 --> 00:07:56,780 right click kiosks and then click new organizational unit four in the new organizational unit dialog 100 00:07:56,780 --> 00:08:04,490 box in the name text box type conference rooms and then click okay five in the navigation pane, expand 101 00:08:04,490 --> 00:08:07,370 the kiosks o u and then click the conference rooms. 102 00:08:07,370 --> 00:08:14,570 Oh, you six right click the conference rooms view and then click create a GPO in this domain and link 103 00:08:14,570 --> 00:08:14,990 it here. 104 00:08:15,890 --> 00:08:22,580 Seven In the new GPO dialog box in the name text box type conference room settings and then click okay 105 00:08:23,390 --> 00:08:28,730 eight in the navigation pane, expand conference rooms and then click the conference room settings. 106 00:08:28,730 --> 00:08:37,070 GPO nine in the navigation pane right click the conference room settings, GPO and then click edit ten 107 00:08:37,070 --> 00:08:43,430 in the group policy management editor window in the navigation pane Expand user configuration, expand 108 00:08:43,430 --> 00:08:50,420 policies, expand administrative templates, expand control panel and then click personalization 11 109 00:08:50,420 --> 00:08:57,320 in the details pane double click the screen saver, time out policy setting and then click enabled 12 110 00:08:57,320 --> 00:09:01,370 in the seconds text box type 7200 and then click okay. 111 00:09:02,240 --> 00:09:08,870 13 in the navigation pane, expand computer configuration, expand policies, expand administrative 112 00:09:08,870 --> 00:09:12,080 templates, expand system, and then click group policy. 113 00:09:13,000 --> 00:09:13,700 14. 114 00:09:13,720 --> 00:09:19,810 In the details pane double click the configure user group policy loopback processing mode policy setting 115 00:09:19,810 --> 00:09:26,260 and then click enabled 15 in the mode dropdown list select merge and then click okay. 116 00:09:27,130 --> 00:09:27,820 16. 117 00:09:27,970 --> 00:09:30,640 Close the group Policy Management Editor Window.