1 00:00:03,070 --> 00:00:05,820 Let's dig in a little bit deeper on the GPM. 2 00:00:05,910 --> 00:00:06,580 See now. 3 00:00:07,480 --> 00:00:10,810 So I've shown you that kind of basic view, that main view. 4 00:00:10,840 --> 00:00:13,780 Now let's dig into the properties around GPOs. 5 00:00:14,680 --> 00:00:18,780 So what you see here on this screen is the details tab for the GPO. 6 00:00:18,790 --> 00:00:24,490 And essentially what we've got here are a number of different properties, like number of changes on 7 00:00:24,490 --> 00:00:31,930 the GPO, the GPO grid, whether you can enable or disable the GPO and then GPO comments, if any. 8 00:00:32,830 --> 00:00:37,420 So it provides you with a lot of information about the GPO kind of at a high level. 9 00:00:38,300 --> 00:00:40,910 I call this the sort of GPO metadata. 10 00:00:41,780 --> 00:00:44,930 Create a date, modify date who the owner is. 11 00:00:45,860 --> 00:00:48,590 Again, user version and computer version. 12 00:00:49,460 --> 00:00:54,560 Those are related to how many changes have been made on the computer and user side of the GPO. 13 00:00:55,400 --> 00:00:59,960 Now, if we shift to the scope view, this shows us a little bit different information. 14 00:01:00,830 --> 00:01:03,830 This shows us how the GPO is linked and filtered. 15 00:01:04,700 --> 00:01:10,850 In this case, this GPO, the defaulters main control policy is linked to the domain controllers o. 16 00:01:10,860 --> 00:01:11,270 U. 17 00:01:12,110 --> 00:01:14,300 So it shows the list of links and their states. 18 00:01:14,300 --> 00:01:17,360 And of course, a GPO can be linked to multiple containers. 19 00:01:17,360 --> 00:01:19,610 So this list could be more than one item here. 20 00:01:20,500 --> 00:01:26,170 But in this case, it's only showing us one container where the GPO is linked to security group filtering. 21 00:01:27,040 --> 00:01:30,670 In this case, the default security group filtering is in place. 22 00:01:30,790 --> 00:01:35,080 But this could be other computer or user groups or user or computer accounts. 23 00:01:35,080 --> 00:01:36,370 Individual accounts. 24 00:01:37,300 --> 00:01:44,620 Remember I said that this is the dialog you use to control any security group filtering on a GPO and 25 00:01:44,620 --> 00:01:50,680 then WMI filtering is listed down here and it will show if there are any WMI filters linked to this 26 00:01:50,680 --> 00:01:51,490 GPO. 27 00:01:51,520 --> 00:01:56,370 It will show those WMI filters and then the GPO Settings tab. 28 00:01:56,370 --> 00:02:01,720 It shows us the actual settings that are defined in the GPO in this kind of HTML format. 29 00:02:02,560 --> 00:02:09,610 And if you right click anywhere in this report, it will allow you to save it as HTML or XML so that 30 00:02:09,610 --> 00:02:14,650 you could potentially save this off and use it at another time to look at the settings that are contained 31 00:02:14,650 --> 00:02:15,670 in this GPO. 32 00:02:16,480 --> 00:02:21,820 And then finally, this is a little bit off the, the properties of the GPO, but within the view menu 33 00:02:21,820 --> 00:02:27,430 in PMC, there are a set of view options on the data within the group policy management console. 34 00:02:28,330 --> 00:02:33,070 And I've sort of focused on these three because they tend to be the most interesting and the most often 35 00:02:33,100 --> 00:02:33,520 used. 36 00:02:34,420 --> 00:02:41,050 The first one is checked by default, enable trust detection, and this just lets you limit the domains 37 00:02:41,050 --> 00:02:45,250 that are shown or the forests that are shown to only those that have two way trusts. 38 00:02:46,150 --> 00:02:51,100 If there's only a one way trust, then they wouldn't be shown in in the PMC console. 39 00:02:52,030 --> 00:02:57,400 The second option show domain controllers after domain names is probably one of the ones that I use 40 00:02:57,400 --> 00:02:58,270 most frequently. 41 00:02:59,130 --> 00:03:04,440 And when you enable that, as I'll show you in the next demo, it gives you the ability to see the domain 42 00:03:04,440 --> 00:03:10,830 controller that you're connected to and performing operations against when you're using the PMC and 43 00:03:10,830 --> 00:03:12,810 subsequently the editor. 44 00:03:13,680 --> 00:03:19,950 Just a note by default, all ghp management operations are typically done against the PDC emulator domain 45 00:03:19,950 --> 00:03:21,360 controller in the domain. 46 00:03:22,260 --> 00:03:24,090 So that's the default state. 47 00:03:24,990 --> 00:03:31,380 You can actually come into M.S. and change that, and I'll talk about that in a later section. 48 00:03:32,220 --> 00:03:36,240 But this is essentially showing you which domain controller you're connected to. 49 00:03:36,990 --> 00:03:43,410 And then this last show, confirmation dialog, that is, you'll get a warning whenever you performing 50 00:03:43,410 --> 00:03:50,160 operations on GPOs or GPO links to let you know that the operation you're performing is perhaps on a 51 00:03:50,160 --> 00:03:52,320 link rather than on the real GPO. 52 00:03:53,130 --> 00:03:57,630 And this will come up, if you'll remember, I just mentioned that if you try to delete a link, all 53 00:03:57,630 --> 00:04:00,240 it's deleting is the link, not the GPO. 54 00:04:01,050 --> 00:04:06,300 And that warning will come up if this box is checked whenever that kind of an operation happens.