Lab managing user settings with group policy.
Scenario, a datum corporation has implemented Microsoft Office 2016, and you want to use group policy
to configure settings for some Office 2016 apps.
The IT department uses log on scripts to provide users with drive mapping to shared folders.
However, maintaining these scripts is an ongoing problem because they are large and complex.
Your manager has asked that you implement drive mapping by using group policy preferences to remove
lag on scripts.
Your manager also has asked that you place a desktop shortcut to the notepad app for all users who belong
to the IT security group.
Additionally, you must add a new computer administrator security group as a local administrator on
all servers to help minimize profile sizes.
You also need to configure folder redirection to redirect several profile folders to each user's home
drive.
Finally, you have to complete the GPO designed to manage user desktops and server security.
Objectives.
After completing this lab, you will be able to use administrative templates to manage user settings.
Implement settings by using group policy preferences.
Configure folder redirection.
Exercise one using administrative templates to manage user settings as a part of implementing group
policy to configure settings for the Office 2016 Apps you now need to import custom administrative templates
for Office 2016 and configure settings.
Exercise two Implementing Settings.
By using group policy preferences, you now have to implement drive mapping by using group policy preferences
to remove log on scripts that a data uses currently to provide users with drive mapping to shared folders.
You also need to place a desktop shortcut to the notepad app for all users who belong to the IT security
group.
Exercise three.
Configuring Folder Redirection To help minimize profile sizes, you decide to configure folder redirection
for the branch office users to redirect several profile folders to each user's home drive.
Exercise for planning group policy optional.
You are tasked with planning a GPIO model for the current infrastructure to manage security for the
user desktops and servers.
You need to finalize the delegation model for administrative tasks and determine the administrators
who will have rights on the client computers.
A data management also wants you to configure Windows, update settings and restrict administrative
tools for regular user accounts.
Additionally, one of the security requirements is that the company have a compliance warning related
to misuse of corporate computers.
As the administrator of a datum, you are tasked with translating the business requirements into GPO
settings.
You must then design and implement the GPOs at the appropriate levels of the EU design.
In this exercise, you will design the GPO strategy that meets the business and organisational requirements
for a datum.
Exercise one.
Using administrative templates to manage user settings.
Exercise scenario as a part of implementing group policy to configure settings for the Office 2016 apps,
you now need to import custom administrative templates for Office 2016 and configure settings.
The main tasks for this exercise are as follows.
One Import Administrative Templates for Microsoft Office 2016 to configure Office 2016 settings.
Three Apply in verify settings on the client computer.
Task one Import Administrative Templates for Microsoft Office 2016 one on low and DC one double click
the admin templates underscore x64 underscore 4390 dash 1000 underscore a.k.a EIC file and extract the
files to the desktop to copy all files and subfolders from the C colon backslash users backslash administrator
backslash desktop backslash adam x directory to C colon backslash windows backslash policy definitions
task to configure Office 2016 Settings one on L0 and DC one from server manager START Group Policy Management
to create a new GPO named Office 2016 Settings.
Three.
Edit the GPIO four.
Locate the user configuration backslash policies backslash.
Administrative Templates backslash.
Microsoft Excel 2016 Node five in Excel Options backslash customize ribbon enabled the display developer
tab in the ribbon setting six in Excel Options Backslash save enable the default file location setting
and set the default file location 2% User Profile percent backslash desktop seven closed the group policy
management editor eight link the office 26 settings to the a data incom domain task three Apply in verify
settings on the client computer one switch to Ello and Cl1 and refresh group policy to start Microsoft
Excel 2016 three Create a blank workbook.
For verify that the developer tab displays on the ribbon.
Five.
If the developer tab is not displayed on the ribbon, perform the following steps a restart l0 and cl1.
B sign in as a date and backslash administrator with the password.
C Perform steps 2 to 4 again.
Six.
Save the file and verify that the default file location is the desktop for the user.
Seven.
Close Excel 2016 Results.
After this exercise, you should have extended administrative templates with templates for Office 2016
and configured some office settings by using group policy.
Exercise to implementing settings by using group policy preferences.
Exercise scenario you now have to implement drive mapping by using group policy preferences to remove
log on scripts that a data uses currently to provide users with drive mapping to shared folders.
You also need to place a desktop shortcut to the notepad app for all users who belong to the IT security
group.
The main tasks for this exercise are as follows one set up the current environment to test map drive
for branch office one users.
Three.
Create a preferences GPO with the required group policy preferences.
For test the preferences task one set up the current environment.
One switch to low and DC one.
Two on low and DC.
One Open file explorer.
Three.
Run the mod zero six.
Dash one.
DPS one.
Windows PowerShell Script.
Four.
Copy the branch script.
Dot cmd file to the clipboard.
Five Switch to group policy management.
Six Edit the branch.
One GPO to configure a user log on script.
Seven Paste the branch script dot cmd script into the scripts folder.
Eight Add the branch script, dot cmd script to the log on scripts.
GPO Setting Task to test map drive for branch office.
One Users.
One switch to allow NCL.
One to restart the computer.
Three when the computer has restarted sign in as a date and backslash addy with the password for open
file explorer and verify the driver's displays.
Five.
If the drive is not available, perform these steps.
A refresh group policy.
B Restart l0 anc l1.
C Sign in as a data backslash A-B with the password pa 55 wd d d.
The drive should now display in File Explorer.
Task three Create a preferences GPO with the required group policy preferences one.
Switch to l0 NDC one to on yellow NDC one.
Open Active Directory users and computers.
Three In the ITU create a new global security group named computer administrators for in the PMC on
the branch office.
One Oh, you delete the link for the branch one.
GPO five.
Create a new GPO named Preferences and link it to the domain six.
Go to user configuration backslash preferences.
Backslash Window Settings Backslash Shortcuts seven.
Create a new shortcut to notepad dot EMC with the following settings.
Name Notepad.
Action.
Create.
Location all users desktop target path c colon backslash windows backslash system32 backslash notepad
dot easy eight on the common tab.
Clear the run in logged on users security context user policy option checkbox nine.
Target the preference for members of the security group ten Go to user configuration backslash preferences
backslash windows settings backslash drive map 11 Create a new map drive with the following settings.
Action Update.
Location backslash backslash L1 hyphen DC one backslash branch one.
Reconnect selected label drive for branch office one use s.
12 on the Common Tab.
Select the run in logged on user security context user policy option checkbox.
13.
Target the preference for users in the branch office.
One toyou.
14.
Go to computer configuration.
Backslash Preferences.
Backslash.
Control Panel Settings.
Backslash.
Local users and groups.
15.
Update the local administrators group using the following settings.
Action update.
Name administrators.
Add new local group member computer administrators.
16 on the common tab.
Clear the run in.
Logged on users security context.
User Policy Option CheckBox 17.
Target the preference for computers that are running the Windows Server 2016.
Family Operating System.
18.
Closed all open windows except group policy management and server manager task for test the preferences
one.
Switch to and restart l0 and seal one to sign in as a data backslash A-B with the password.
Three.
Open file explorer and verify the driver's displays.
Note The drive label now is drive for branch office one, which verifies that the drive is mapped through
group policy preferences.
Four On the desktop.
Verify a shortcut for notepad displays.
Five.
If the shortcut for Notepad is not available, perform these steps.
A refresh group policy.
B Restart ello and seal one.
C Sign in as a date and backslash A-B with the password par 55 w ardi d the shortcut for notepad should
now display on the desktop.
Six Open Computer Management.
Seven In Computer Management.
Browse to the system tools backslash local users and groups.
Backslash Groups node.
Eight Verify that the Computer Administrators Group is not a member of the Administrators Group because
the preferences setting only applies to servers.
Nine Sign out of Ello and SEAL one results.
After this exercise you should have removed the log on scripts, configured preference settings and
then assign them by using GPOs.
Exercise three Configuring Folder Redirection Exercise Scenario To help minimize profile sizes.
You decide to configure folder redirection for the branch office users to redirect several profile folders
to each user's home drive.
The main tasks for this exercise are as follows.
One Create a shared folder to store the redirected folders to create a new GPO and link it to the branch
office.
One Organizational Unit o.
U.
Three.
Edit the folder redirection settings in the policy for test the folder redirection settings task one
Create a shared folder to store the redirected folders on L1 DC one Open File Explorer.
Create a new folder by using the following properties and then share it with specific people.
Path C Colon Backslash Branch one Redirect Share Name Branch one redirect permissions everyone reads
slash write task to create a new GPO and link it to the branch office.
One Organizational Unit o you on low and DC one open group policy management and then create and link
a new GPO named folder redirection to the branch office.
10u.
Task three Edit the folder redirection settings in the policy one.
Open the folder redirection GPO for editing to under user configuration.
Browse to policies backslash windows settings backslash folder redirection three Configure the documents
folder properties to use the basic redirect everyone's folder to the same location setting four.
Ensure that the target folder location is set to create a folder for each user under the root path.
Five.
Specify the root path as backslash backslash l1 dash DC one backslash branch one.
Redirect six.
Configure the pictures and music folders to follow the documents folder.
Seven.
Close all open windows on low and DC one.
Task four.
Test the folder redirection settings.
One Switch to l0 NCL one to sign in as a data backslash.
Abbie with the password pa 55 w dot ar.d.
Three.
Open the command prompt window.
Type the following command to refresh group policy and then press enter.
Pop date slash force.
Four Sign out and then sign back into ELO and seal l1 as a date and backslash.
Abbi with the password par 55 w dot ardi.
Five.
Open file explorer and verify that in the documents properties dialog box the location is backslash
backslash l1 hyphen DC one backslash branch one redirect backslash abbie.
Six In the documents folder verify that the two subfolders music and pictures exist.
Note This verifies that music and pictures also are redirected.
Seven Sign out of ELO and seal one results.
After this exercise, you should have successfully configured folder redirection to a shared folder
on the L1 DC one server exercise for Planning Group Policy Optional.
Exercise scenario, you are tasked with planning a GPIO model for the current infrastructure to manage
security for the user desktops and servers.
You need to finalize the delegation model for administrative tasks and determine the administrators
who will have rights on the client computers.
A data management also wants you to configure Windows, update settings and restrict administrative
tools for regular user accounts.
Additionally, one of the security requirements is that the company have a compliance warning related
to misuse of corporate computers.
As the administrator of a datum.
You are tasked with translating the business requirements into GPO settings.
You must then design and implement the GPOs at the appropriate levels of the new design.
In this exercise, you will design the GPO strategy that meets the business and organisational requirements
for a datum supporting documentation.
Beth Burke.
From Hong Tang Kong at a date and dotcom sent July 2nd, 1143 to Beth at a date.
Incom subject GPO Design.
Hello, Beth.
As we discussed in our meeting yesterday, we need to strengthen the security of servers and configure
the users desktops according to the first initial design.
I've included the notes of our meeting in the attached proposal document.
Please read the document also.
It would be great if you could send me the updated proposal document later this week.
Thank you very much.
Hung a datum.
GPO Strategy Proposal Document Reference Number BZ 00918/1 document author.
Date Requirements.
Overview.
Design a GPO strategy that meets the following requirements.
All the organisation's computers should have a core group of settings that must be applied.
These settings should include configuring the local administrator accounts, configuring update settings,
restricting certain options such as access to the registry editor.
These settings should not apply to administrator desktops.
Each office should have a core group of settings that apply to their workstations.
As of now, you need to implement the following.
Display a security warning prior to computer sign in stating that only a datum employees can use the
computers.
This setting needs to be applied to each location and to display automatically in other languages for
foreign locations.
All users must have a default set of mapped drives assigned to them.
You should based the map drive on the department membership.
The Central IT administrators in London must be able to manage all GPOs and settings in the organization.
Administrators in each office should be able to manage only GPOs that apply to that office.
Summary of information.
The supporting all use structure includes the following users are currently grouped by department in
a top level low.
You clients are in the top level clients o u which is separated by location on the next level.
Proposals.
Which of the requirements will necessitate creating one or more GPOs?
Can you fulfill any of the requirements without creating GPOs?
Are there any exceptions to the default GPO application that you must consider?
List the GPOs that you must create to fulfill the lab scenarios requirements.
Provide the following information in the table.
Provided Name of the GPO.
The requirements that the GPO fulfills the configuration settings, user policies, computer policies,
user preferences, or computer preferences.
That the GPO will contain the container domain or use site to which the GPO will be linked.
Name Requirements Fulfilled Configuration Settings applies to list other configuration tasks that you
must perform within the group policy management console to fulfill the scenario requirements.
The main tasks for this exercise are as follows.
One.
Read the supporting documentation to update the proposal document with your planned course of action.
Three.
Examine the suggested proposals in the lab.
Answer key.
Four.
Discuss your proposed solution with the class as guided by your instructor.
Five.
Prepare for the next module.
Task one.
Read the supporting documentation.
Read the documentation provided task to update the proposal document with your planned course of action.
Answer the questions in the Proposal section of the Date and Strategy.
Proposal Document.
Task three Examine the suggested proposals in the lab.
Answer key Compare your proposals with the ones in the lab.
Answer Key Task four Discuss your proposed solution with the class as guided by your instructor.
Be prepared to discuss your proposals with the class results.
After completing this exercise, you will be able to design a strategy.