1 00:00:00,450 --> 00:00:10,380 Group policy added in tools and Windows Server 2016 provides several functionalities that aid GPO configuration 2 00:00:10,380 --> 00:00:11,600 and management. 3 00:00:11,760 --> 00:00:18,870 In this demonstration you review these options will see how to configure an administrative template 4 00:00:18,870 --> 00:00:25,050 Saddam and the filter policy settings for administrative templates. 5 00:00:25,110 --> 00:00:31,360 We'll also see how to filter based on commands and how to copy GPO servants. 6 00:00:31,380 --> 00:00:39,290 So in the group policy management Ed you can configure policies set in by a double clicking it the policies 7 00:00:39,370 --> 00:00:47,430 certain properties dialog box appears the policy settings in the administrative templates can have three 8 00:00:47,430 --> 00:00:53,470 states not configured enabled and disabled in a new GPO. 9 00:00:53,580 --> 00:00:58,200 Every policy is set and defaults to not configured. 10 00:00:58,200 --> 00:01:05,250 This means that the GPO does not modify the existing configuration of that particular asset and for 11 00:01:05,250 --> 00:01:06,910 a user or computer. 12 00:01:06,990 --> 00:01:11,430 The effect of the change depends on the policies setting. 13 00:01:11,430 --> 00:01:20,000 For example if you enable the rewound to access to register read it and tools policies certain users 14 00:01:20,040 --> 00:01:26,910 are unable to launch the Registry Editor or register dot XY. 15 00:01:26,970 --> 00:01:33,040 If you disable the policies certain we ensure that users can launch the registry. 16 00:01:33,050 --> 00:01:38,340 Ed notice the double negative in this policy has set an example. 17 00:01:38,370 --> 00:01:42,000 You disable a policy that prevents an action. 18 00:01:42,090 --> 00:01:49,590 Therefore you allow the action now about filter and policy settings for administrative templates. 19 00:01:49,740 --> 00:01:58,920 Disadvantage of previous versions of group policy added in tools is the inability to search for a specific 20 00:01:58,920 --> 00:02:03,520 policy saddled with thousands of policies to choose from. 21 00:02:03,570 --> 00:02:11,430 It can be difficult to locate the exact set in that you want to configure the Group Policy and Management 22 00:02:11,460 --> 00:02:22,530 Ed in Windows Server 2016 or 2019 solves this problem for certain in administrative templates you know 23 00:02:22,560 --> 00:02:26,670 can create filters to locate specific policies certain. 24 00:02:26,890 --> 00:02:34,380 So to create a filter you have to right click administrative templates and then click filter options 25 00:02:34,590 --> 00:02:43,770 and the second stack step is to locate a specific policy you have to select the enable keyword filters 26 00:02:43,770 --> 00:02:51,930 checkbox and enter the words to a filter with and then select the fields in which to search. 27 00:02:51,990 --> 00:03:00,180 You also can filter for group policies sentence that apply to specific versions of their windows operating 28 00:03:00,180 --> 00:03:07,280 system or Microsoft Internet Explorer or the other Windows based components. 29 00:03:07,290 --> 00:03:13,420 However the filter only applies to a sentence in the administrative templates. 30 00:03:13,420 --> 00:03:17,510 Note You can also filter based on commands. 31 00:03:17,550 --> 00:03:25,450 Windows Server 2016 enables you to add commands to policies sentence in the administrative templates 32 00:03:25,470 --> 00:03:27,020 no to do so. 33 00:03:27,050 --> 00:03:31,920 DoubleClick a policy is set in and then click the command tab. 34 00:03:31,940 --> 00:03:40,020 The best practice you should add commands to configure policies settings you should document the justification 35 00:03:40,020 --> 00:03:44,730 for a certain and its intended effect. 36 00:03:44,730 --> 00:03:48,850 You also should add commands to the GPO itself. 37 00:03:48,930 --> 00:03:58,980 Windows Server 2016 or later operating systems like Windows Server or 2019 enables you to attach commands 38 00:03:58,980 --> 00:04:09,060 to a GPO in the group policy management ed in the console 3 right click the root node and click properties 39 00:04:09,300 --> 00:04:11,930 and then click the command tab. 40 00:04:11,940 --> 00:04:19,890 You can also call up a GPO Saturn's starter GPO as can contain administrative templates policies sadness 41 00:04:19,980 --> 00:04:23,810 only in addition to using starter GP. 42 00:04:23,850 --> 00:04:30,790 There are two other ways to cope with sentence from one GPO into a new GPO. 43 00:04:30,810 --> 00:04:39,010 You can copy and paste in da GP always in the group policy so objects container of the group all this 44 00:04:39,000 --> 00:04:48,570 a management console or GP M.S. so that you have a new GP all with all the sadness of the source GPO 45 00:04:48,870 --> 00:04:54,980 or you can transfer certain between GP O's in different domains or forest. 46 00:04:55,080 --> 00:05:04,050 For this you have to right click a GP all and then click back in the target domain create a new GPO 47 00:05:04,320 --> 00:05:08,810 right click the GPO and then click import sadness. 48 00:05:08,880 --> 00:05:13,510 You will be able to improve the settings so that backed up GPO. 49 00:05:13,560 --> 00:05:17,760 Now let's switch over to our demonstration in one moment. 50 00:05:17,910 --> 00:05:25,800 And in this demonstration you'll see how to configure a certain in administrative templates how to filter 51 00:05:25,800 --> 00:05:33,330 administrative templates policies Saturns and add commands to policies Saturns and add commands to a 52 00:05:33,330 --> 00:05:34,460 GPO. 53 00:05:34,470 --> 00:05:44,560 You also see how to create a new GPO by copying an existing GPL and how to create a new bill by import 54 00:05:44,560 --> 00:05:48,840 insurgents that were exported from another GPO. 55 00:05:48,840 --> 00:05:56,760 So on my lawn DC one from server manager I'll click tools and then click group policy management and 56 00:05:56,760 --> 00:06:05,810 their navigation pane I'll expand forest a datum dot com and expand domains then I'll expand aid agent 57 00:06:05,850 --> 00:06:13,450 dot com and then click the group policy objects container I'll right click the group policy objects 58 00:06:13,470 --> 00:06:24,030 container and then click new in the new GPO dialog box in the name field I'll type GPO 1 and then click 59 00:06:24,030 --> 00:06:32,760 Okay learning the details Spain I'll right click GPO 1 and then click added in the group policy management 60 00:06:32,880 --> 00:06:43,290 Ed window in the navigation pane I'll expand user configuration and expand policies then expand administrative 61 00:06:43,290 --> 00:06:51,990 templates and then click system learning the details Spain I'll double click prevent access to the command 62 00:06:52,020 --> 00:07:01,530 prompt and in the prevent access to the common room dialog box I if I can find the 3 percent possible 63 00:07:01,530 --> 00:07:07,920 values and can choose the necessary well you know I'll click cancel. 64 00:07:08,010 --> 00:07:14,310 So that was a demonstration how to configure and administrative templates policies Sarah. 65 00:07:14,410 --> 00:07:20,670 Now let's filter administrative templates policies evidence for this all right click administrative 66 00:07:20,670 --> 00:07:29,910 templates and then click filter options select the enable keyword filters check box mountain the filter 67 00:07:30,180 --> 00:07:39,630 for vert text box I'll type screen say we'll see where and in the dropdown box next to the text box 68 00:07:39,930 --> 00:07:43,240 I'll select all and then click Okay. 69 00:07:43,380 --> 00:07:51,090 Please notice that administrative templates policies settings filter shows only those that contain the 70 00:07:51,090 --> 00:07:59,700 words screen saver here the sentence may appear without screensaver in the title because screen saver 71 00:07:59,700 --> 00:08:08,430 can also appear in the help text now in the console 3 under use configuration I'll right click administrative 72 00:08:08,430 --> 00:08:17,940 templates and then click filter options I'll clear the enable keyword filters check box out in the configured 73 00:08:18,300 --> 00:08:23,310 dropdown list box I'll select a yes and then click Okay. 74 00:08:23,370 --> 00:08:30,410 Now the administrative templates policies settings filter shows only those that have been configure 75 00:08:30,410 --> 00:08:39,660 test enabled or disabled most surgeons have been configured so in the console 3 under user configuration 76 00:08:39,880 --> 00:08:46,430 I'll right click administrative templates and then clear the filter on option. 77 00:08:46,620 --> 00:08:54,540 So in the next demonstration will add commands to a policy certain for this in the console 3 under user 78 00:08:54,540 --> 00:09:03,270 configuration I'll expand policies expand administrative templates and expand control panel and then 79 00:09:03,270 --> 00:09:11,460 click personalization and in the details pane I'll double click the enabled screen saver policies certain 80 00:09:11,820 --> 00:09:14,540 and in the command section I'll type. 81 00:09:14,630 --> 00:09:23,460 Core part 2 security policy for the screen saver I'll click enabled to enable the policy and then click 82 00:09:23,460 --> 00:09:24,230 Okay. 83 00:09:24,330 --> 00:09:31,260 After that I'll double click the password protected the screen saver policies certain and then click 84 00:09:31,260 --> 00:09:40,530 enabled and in the command section I'll type corporate I.T. security policy implemented with combination 85 00:09:40,740 --> 00:09:44,840 with enabled screen saver and then click Okay. 86 00:09:44,880 --> 00:09:53,970 Now let's add commands to a GPO or these in the group policy management Ed in the console 3 hour right 87 00:09:54,000 --> 00:10:03,010 click the root node which is GPO one on Long DC one a datum dot com and then click properties. 88 00:10:03,100 --> 00:10:11,010 I'll click the command tab and type a datum corporate standard policies and then click Okay. 89 00:10:11,140 --> 00:10:18,880 I'd like to point out that this command displays all the details step of the GPO in the group policy 90 00:10:18,880 --> 00:10:20,470 management console. 91 00:10:20,470 --> 00:10:25,500 So for now I'll close the group policy and management editor window. 92 00:10:25,810 --> 00:10:34,330 Let's create a new GPO by copying an existing GPO in the jeep EMC in navigation pane. 93 00:10:34,330 --> 00:10:41,080 I'll click group policy objects container and right click GPO one and one click copy. 94 00:10:41,440 --> 00:10:45,970 Then I'll right click the group policy object container. 95 00:10:46,090 --> 00:10:48,540 Click paste and then click Okay. 96 00:10:48,550 --> 00:10:49,320 Twice. 97 00:10:49,370 --> 00:10:53,820 That will create a new GPO by copying an existing GPO. 98 00:10:53,830 --> 00:10:56,140 In my case it's GPO 1. 99 00:10:56,140 --> 00:11:03,690 Now let's create a new GPO by import insurgents that were exported from another GPO again in the jeep 100 00:11:03,690 --> 00:11:12,190 PMC and the navigation pane I'll click the group policy objects container right click GPO 1 and then 101 00:11:12,190 --> 00:11:20,530 click back up in the location box I'll type circle on backslash so I'll back up this policy on C drive 102 00:11:20,800 --> 00:11:26,320 and then on the route of the C drive and then click back up when the backup finishes. 103 00:11:26,440 --> 00:11:30,720 I'll click okay in the gypsy I'm seeing in the navigation pane. 104 00:11:30,820 --> 00:11:38,860 I'll right click the group policy objects container and then click new in the name box I'll type a datum 105 00:11:38,950 --> 00:11:48,430 import and then click okay again in the navigation pane all right click the a datum import GPO and then 106 00:11:48,430 --> 00:11:57,490 click import Saturns and in the import Saturns result I'll click next three times I'll select GPO one 107 00:11:57,490 --> 00:12:02,850 and then click next two times then I'll click finish and then click Okay. 108 00:12:02,890 --> 00:12:11,410 So in this demonstration we've created a new GPO by import insurgents that were exported from another 109 00:12:11,410 --> 00:12:12,320 GPO. 110 00:12:12,430 --> 00:12:17,160 In my case that was the original GI Bill was GPL 1. 111 00:12:17,170 --> 00:12:25,590 Next up we'll be talking about important security templates and the easiest way how to configure security 112 00:12:25,620 --> 00:12:26,530 Saddam's. 113 00:12:26,560 --> 00:12:27,660 I'll see you there.