1
00:00:03,030 --> 00:00:03,810
Okay.

2
00:00:04,680 --> 00:00:08,310
Now I'm going to shift gears and talk about group policy targeting.

3
00:00:09,240 --> 00:00:16,890
So remember from module one I said the GPOs are processed or pulled by user objects or computer objects

4
00:00:16,890 --> 00:00:17,820
and add only.

5
00:00:18,710 --> 00:00:24,530
In other words, it's only user objects and computer objects that are affected by a group policy and

6
00:00:24,530 --> 00:00:26,600
that can be targeted by group policy.

7
00:00:27,500 --> 00:00:32,060
So what that relates to is, let's say I have a user in the marketing users, O.U.

8
00:00:32,870 --> 00:00:39,020
And I have a GPL that defines some settings under user configuration policies, whatever administrative

9
00:00:39,020 --> 00:00:41,570
templates or security or preferences.

10
00:00:42,470 --> 00:00:46,610
Those user configuration settings are processed by the user object only.

11
00:00:46,640 --> 00:00:50,060
In other words, the user object is the thing I'm targeting.

12
00:00:50,900 --> 00:00:57,350
Likewise, if I have a computer object in AD in the marketing computers, you need to find a GPO that

13
00:00:57,350 --> 00:01:00,020
has computer configuration settings underneath it.

14
00:01:00,950 --> 00:01:03,920
Then those will be processed by that computer object.

15
00:01:04,800 --> 00:01:10,530
And it's kind of a key concept to understand, and it's one that often confuses people in terms of targeting

16
00:01:10,540 --> 00:01:11,370
GPOs.

17
00:01:12,300 --> 00:01:17,940
You want to target user objects to the stuff under user configuration and you want to target computer

18
00:01:17,940 --> 00:01:22,080
objects to the stuff under computer configuration within a GPO.

19
00:01:22,920 --> 00:01:25,710
So it's kind of an important fundamental thing.

20
00:01:26,610 --> 00:01:33,660
So everything under computer configuration in the GPO editor only applies to computer objects, and

21
00:01:33,660 --> 00:01:39,120
everything under user configuration only applies to user objects.

22
00:01:40,020 --> 00:01:45,420
And once you keep that concept straight, the targeting or the mis targeting of policy becomes a lot

23
00:01:45,420 --> 00:01:47,100
easier to to work through.

24
00:01:47,970 --> 00:01:51,960
So this is a really important point, and I'm just I'm going to say it again.

25
00:01:52,830 --> 00:01:54,180
Computer objects.

26
00:01:55,090 --> 00:01:57,710
Processed stuff under computer configuration.

27
00:01:57,730 --> 00:02:02,200
User objects process stuff under user configuration within a GPO.

28
00:02:03,070 --> 00:02:06,070
So what's the lesson you can't link?

29
00:02:06,070 --> 00:02:08,380
And I'm going to talk about linking in a second.

30
00:02:08,380 --> 00:02:12,760
You can't link a GPO containing user settings to an O you filled with computers.

31
00:02:13,660 --> 00:02:15,130
Nothing's going to happen.

32
00:02:16,000 --> 00:02:21,430
The computers will ignore the settings that show up under user configuration within that GPO.

33
00:02:22,270 --> 00:02:23,800
So what does that look like?

34
00:02:24,690 --> 00:02:26,900
I've got a computer in my marketing computers.

35
00:02:27,540 --> 00:02:33,300
And I'm basically saying if I see a GP and it's got user configuration settings in it, I'm just going

36
00:02:33,300 --> 00:02:33,960
to ignore it.

37
00:02:34,860 --> 00:02:37,440
It doesn't apply to me because I'm a computer.

38
00:02:37,470 --> 00:02:38,460
I'm not a user.

39
00:02:39,330 --> 00:02:43,170
And I don't know how to do anything with user configuration settings.

40
00:02:44,100 --> 00:02:47,910
So that's essentially the key point that I wanted to bring home in this section.