Group policy added in tools and Windows Server 2016 provides several functionalities that aid GPO configuration
and management.
In this demonstration you review these options will see how to configure an administrative template
Saddam and the filter policy settings for administrative templates.
We'll also see how to filter based on commands and how to copy GPO servants.
So in the group policy management Ed you can configure policies set in by a double clicking it the policies
certain properties dialog box appears the policy settings in the administrative templates can have three
states not configured enabled and disabled in a new GPO.
Every policy is set and defaults to not configured.
This means that the GPO does not modify the existing configuration of that particular asset and for
a user or computer.
The effect of the change depends on the policies setting.
For example if you enable the rewound to access to register read it and tools policies certain users
are unable to launch the Registry Editor or register dot XY.
If you disable the policies certain we ensure that users can launch the registry.
Ed notice the double negative in this policy has set an example.
You disable a policy that prevents an action.
Therefore you allow the action now about filter and policy settings for administrative templates.
Disadvantage of previous versions of group policy added in tools is the inability to search for a specific
policy saddled with thousands of policies to choose from.
It can be difficult to locate the exact set in that you want to configure the Group Policy and Management
Ed in Windows Server 2016 or 2019 solves this problem for certain in administrative templates you know
can create filters to locate specific policies certain.
So to create a filter you have to right click administrative templates and then click filter options
and the second stack step is to locate a specific policy you have to select the enable keyword filters
checkbox and enter the words to a filter with and then select the fields in which to search.
You also can filter for group policies sentence that apply to specific versions of their windows operating
system or Microsoft Internet Explorer or the other Windows based components.
However the filter only applies to a sentence in the administrative templates.
Note You can also filter based on commands.
Windows Server 2016 enables you to add commands to policies sentence in the administrative templates
no to do so.
DoubleClick a policy is set in and then click the command tab.
The best practice you should add commands to configure policies settings you should document the justification
for a certain and its intended effect.
You also should add commands to the GPO itself.
Windows Server 2016 or later operating systems like Windows Server or 2019 enables you to attach commands
to a GPO in the group policy management ed in the console 3 right click the root node and click properties
and then click the command tab.
You can also call up a GPO Saturn's starter GPO as can contain administrative templates policies sadness
only in addition to using starter GP.
There are two other ways to cope with sentence from one GPO into a new GPO.
You can copy and paste in da GP always in the group policy so objects container of the group all this
a management console or GP M.S. so that you have a new GP all with all the sadness of the source GPO
or you can transfer certain between GP O's in different domains or forest.
For this you have to right click a GP all and then click back in the target domain create a new GPO
right click the GPO and then click import sadness.
You will be able to improve the settings so that backed up GPO.
Now let's switch over to our demonstration in one moment.
And in this demonstration you'll see how to configure a certain in administrative templates how to filter
administrative templates policies Saturns and add commands to policies Saturns and add commands to a
GPO.
You also see how to create a new GPO by copying an existing GPL and how to create a new bill by import
insurgents that were exported from another GPO.
So on my lawn DC one from server manager I'll click tools and then click group policy management and
their navigation pane I'll expand forest a datum dot com and expand domains then I'll expand aid agent
dot com and then click the group policy objects container I'll right click the group policy objects
container and then click new in the new GPO dialog box in the name field I'll type GPO 1 and then click
Okay learning the details Spain I'll right click GPO 1 and then click added in the group policy management
Ed window in the navigation pane I'll expand user configuration and expand policies then expand administrative
templates and then click system learning the details Spain I'll double click prevent access to the command
prompt and in the prevent access to the common room dialog box I if I can find the 3 percent possible
values and can choose the necessary well you know I'll click cancel.
So that was a demonstration how to configure and administrative templates policies Sarah.
Now let's filter administrative templates policies evidence for this all right click administrative
templates and then click filter options select the enable keyword filters check box mountain the filter
for vert text box I'll type screen say we'll see where and in the dropdown box next to the text box
I'll select all and then click Okay.
Please notice that administrative templates policies settings filter shows only those that contain the
words screen saver here the sentence may appear without screensaver in the title because screen saver
can also appear in the help text now in the console 3 under use configuration I'll right click administrative
templates and then click filter options I'll clear the enable keyword filters check box out in the configured
dropdown list box I'll select a yes and then click Okay.
Now the administrative templates policies settings filter shows only those that have been configure
test enabled or disabled most surgeons have been configured so in the console 3 under user configuration
I'll right click administrative templates and then clear the filter on option.
So in the next demonstration will add commands to a policy certain for this in the console 3 under user
configuration I'll expand policies expand administrative templates and expand control panel and then
click personalization and in the details pane I'll double click the enabled screen saver policies certain
and in the command section I'll type.
Core part 2 security policy for the screen saver I'll click enabled to enable the policy and then click
Okay.
After that I'll double click the password protected the screen saver policies certain and then click
enabled and in the command section I'll type corporate I.T. security policy implemented with combination
with enabled screen saver and then click Okay.
Now let's add commands to a GPO or these in the group policy management Ed in the console 3 hour right
click the root node which is GPO one on Long DC one a datum dot com and then click properties.
I'll click the command tab and type a datum corporate standard policies and then click Okay.
I'd like to point out that this command displays all the details step of the GPO in the group policy
management console.
So for now I'll close the group policy and management editor window.
Let's create a new GPO by copying an existing GPO in the jeep EMC in navigation pane.
I'll click group policy objects container and right click GPO one and one click copy.
Then I'll right click the group policy object container.
Click paste and then click Okay.
Twice.
That will create a new GPO by copying an existing GPO.
In my case it's GPO 1.
Now let's create a new GPO by import insurgents that were exported from another GPO again in the jeep
PMC and the navigation pane I'll click the group policy objects container right click GPO 1 and then
click back up in the location box I'll type circle on backslash so I'll back up this policy on C drive
and then on the route of the C drive and then click back up when the backup finishes.
I'll click okay in the gypsy I'm seeing in the navigation pane.
I'll right click the group policy objects container and then click new in the name box I'll type a datum
import and then click okay again in the navigation pane all right click the a datum import GPO and then
click import Saturns and in the import Saturns result I'll click next three times I'll select GPO one
and then click next two times then I'll click finish and then click Okay.
So in this demonstration we've created a new GPO by import insurgents that were exported from another
GPO.
In my case that was the original GI Bill was GPL 1.
Next up we'll be talking about important security templates and the easiest way how to configure security
Saddam's.
I'll see you there.