1
00:00:07,620 --> 00:00:13,140
The group policy infrastructure has to perform optimally for you to apply policy settings to computers

2
00:00:13,140 --> 00:00:16,740
and users correctly in very large enterprises.

3
00:00:16,740 --> 00:00:22,500
With thousands of GPOs spread across multiple locations in time zones, there could be a significant

4
00:00:22,500 --> 00:00:24,960
replication delay between domain controllers.

5
00:00:25,860 --> 00:00:31,020
A mismatch in version numbers between the group policy container and the group policy template of a

6
00:00:31,020 --> 00:00:36,840
GPO might indicate an issue with group policy in group policy management console.

7
00:00:36,990 --> 00:00:41,850
You can create a report displaying the overall health state of the group policy infrastructure for a

8
00:00:41,850 --> 00:00:42,360
domain.

9
00:00:43,200 --> 00:00:45,930
You can also display the health of a single GPO.

10
00:00:46,740 --> 00:00:52,110
The status tab on the domain and group policy management console can display information that indicates

11
00:00:52,110 --> 00:00:54,270
the health of the group policy infrastructure.

12
00:00:55,170 --> 00:01:01,170
The information displayed on the tab contains information regarding domain controllers, GPO replication

13
00:01:01,170 --> 00:01:02,460
and GPO versioning.

14
00:01:03,300 --> 00:01:06,240
The health status helps you find any irregularities.

15
00:01:07,110 --> 00:01:12,090
You can perform a health analysis on either the entire domain or on a single GPO.

16
00:01:12,900 --> 00:01:18,180
You perform the task from the status tab on the domain, or select a GPO by clicking Detect.

17
00:01:18,180 --> 00:01:25,590
Now you choose which domain controller you want to select as the baseline group policy management console,

18
00:01:25,590 --> 00:01:31,170
then compares both the group policy container and the group policy template on all the domain controllers

19
00:01:31,170 --> 00:01:34,110
in the selected domain with the Baseline Domain Controller.

20
00:01:34,980 --> 00:01:42,300
The analysis performs the following comparisons permissions for each group policy container version

21
00:01:42,300 --> 00:01:49,890
number for each group policy template number of group policy container objects permissions on each group

22
00:01:49,890 --> 00:01:57,270
policy template version numbers stored for each group policy container number of group policy template

23
00:01:57,270 --> 00:02:02,940
folders and files cache information for each file in all group policy templates.

24
00:02:03,840 --> 00:02:09,660
If group policy management console cannot contact a domain controller during the analysis, or if a

25
00:02:09,660 --> 00:02:15,210
domain controller is not consistent with the domain controller used as a baseline, then group policy

26
00:02:15,210 --> 00:02:20,460
management console adds the analyzed domain controller to the domain controllers with replication in

27
00:02:20,460 --> 00:02:21,360
progress list.