Exercise one.
Creating and Configuring GPOs.
Task one Create an editor GPO one on L0 and DC one from server manager, Click Tools and then click
group policy management.
Two If necessary, switch to the group policy management window.
Three In Group Policy Management console in the navigation pane expand forest a data imdb.com domains
and a data imdb.com and then click the group policy objects container.
Four in the navigation pane right click the group policy objects container and then click new.
Five in the name text box, type a date and standards and then click okay.
Six In the details pane right click the A Datum Standards Group Policy Object GPL and then click edit
seven in the group policy management editor window in the navigation pane, expand user configuration,
expand policies, expand administrative templates, and then click system.
Eight Double Click to prevent access to registry editing tools policy setting.
Nine In the Prevent Access to Registry Editing Tools, dialog box, click enabled and then click okay.
Ten In the navigation pane, expand user configuration, expand policies, expand administrative templates,
expand control panel, and then click personalization.
11 In the details pane double click the screen saver time out policy setting.
12 In the Screen Saver Timeout Dialog Box Click enabled in the seconds Text box type 600 and then click
okay 13 double click the password, protect the screen saver policy setting 14 in the password, protect
the screen saver dialog box, click enabled and then click, okay.
15 Close the group policy Management Editor Window Task to link the GPO one in the Group Policy Management
Window in the navigation pane right click the A data incom domain and then click link an existing GPO
two in the select GPO Dialog Box, Click Add Date and standards and then click okay.
Task three View the effects of the GPO settings one.
Switch to L0 and SEAL one and then sign in as a data and backslash administrator with the password to
right click start and then Click Control Panel.
Three.
Click System and security and then click allow an app through Windows Firewall.
For in the allowed apps and features list.
Select the following checkboxes and then click okay.
All remote event log management all windows management instrumentation WMI.
Five Sign out and then sign in as a date and backslash kani with the password.
Six.
Click start type, screen saver and then click change screen saver.
It may take a few minutes for the option to appear.
Seven in the Screen Saver Settings Dialog Box.
Notice that the wait option is dimmed.
You cannot change the time out.
Notice that the on resume display log on screen option is selected and dimmed and that you cannot change
the settings if the on resume display log on screen option is not selected and dimmed.
Then perform the following steps.
A right click start and then click run.
Be in the run dialog box in the open text box type update slash force and then click.
Okay, see.
Click start type, screen saver.
And then click change.
Screen Saver.
Eight.
Click.
Okay.
Nine.
Right click start.
And then click Run.
Ten.
In the run dialog box in the open text box type.
Reset it and then click.
Okay.
11 in the Registry Editor Dialog Box click.
Okay.
Exercise two Managing Scope.
Task one.
Create and link the required GPOs one on low and DC one in group policy management console in the navigation
pane if necessary.
Expand forest a data cnn.com, expand domains, expand a datacom, and then click research to right
click the research organizational unit or you and then click create a GPO in this domain and link it
here.
Three in the new GPIO dialog box in the name text box type research application override and then click
okay for it in the details pane right click the research application override GPO and then click edit
five in the console tree.
Expand user configuration, expand policies, expand administrative templates, expand control panel
and then click personalization six double click the screen saver, time out policy setting, seven click
disabled and then click okay.
Eight closed the group policy management editor window test to verify the order of precedence in the
group policy management console tree.
Click the research OAU and then click the Group Policy Inheritance Tab.
Notice that the research application override GPL has higher precedence than the A Datum Standards GPO.
The screensaver time out policy setting that you just configured in the research application override
GPO is applied after the setting in the A Datum Standards GPO.
Therefore, the new setting will overwrite the standard setting and will prevail.
Screensaver timeout will be unavailable for users within the scope of the research application.
Override GPO.
Task three Configure the scope of a GPL with security filtering one on ELO and DC, one in group policy
management console in the navigation pane if necessary, expand the research you and then click the
research application override GPO under the research oh you to in the group policy management console
dialog box read the message select the do not show this message again checkbox and then click okay.
Three.
In the security filtering section, you will see that the GPL applies by default to all authenticated
users.
Four in the security filtering section, click authenticated users and then click remove.
Five in the group policy management dialog box click okay six in the details pane click add seven in
the select user computer or group dialog box in the Enter the object name to select examples, text
box type research and then click okay eight in the details pane under security filtering click add nine
in the select user computer or group dialog box Click Object Types ten in the object types dialog box,
select the computer's checkbox and then click okay 11 in the select user computer or group dialog box
in the Enter Object names to select examples text box type L1 C, l one and then click okay task for
configure loopback processing one on low and DC one in group policy management console in the navigation
pane click a data imdb.com right click a data imdb.com and then click new organizational unit two in
the new organizational unit dialog box in the name text box type kiosks and then click okay, three
right click kiosks and then click new organizational unit four in the new organizational unit dialog
box in the name text box type conference rooms and then click okay five in the navigation pane, expand
the kiosks o u and then click the conference rooms.
Oh, you six right click the conference rooms view and then click create a GPO in this domain and link
it here.
Seven In the new GPO dialog box in the name text box type conference room settings and then click okay
eight in the navigation pane, expand conference rooms and then click the conference room settings.
GPO nine in the navigation pane right click the conference room settings, GPO and then click edit ten
in the group policy management editor window in the navigation pane Expand user configuration, expand
policies, expand administrative templates, expand control panel and then click personalization 11
in the details pane double click the screen saver, time out policy setting and then click enabled 12
in the seconds text box type 7200 and then click okay.
13 in the navigation pane, expand computer configuration, expand policies, expand administrative
templates, expand system, and then click group policy.
14.
In the details pane double click the configure user group policy loopback processing mode policy setting
and then click enabled 15 in the mode dropdown list select merge and then click okay.
16.
Close the group Policy Management Editor Window.