Let's dig in a little bit deeper on the GPM.
See now.
So I've shown you that kind of basic view, that main view.
Now let's dig into the properties around GPOs.
So what you see here on this screen is the details tab for the GPO.
And essentially what we've got here are a number of different properties, like number of changes on
the GPO, the GPO grid, whether you can enable or disable the GPO and then GPO comments, if any.
So it provides you with a lot of information about the GPO kind of at a high level.
I call this the sort of GPO metadata.
Create a date, modify date who the owner is.
Again, user version and computer version.
Those are related to how many changes have been made on the computer and user side of the GPO.
Now, if we shift to the scope view, this shows us a little bit different information.
This shows us how the GPO is linked and filtered.
In this case, this GPO, the defaulters main control policy is linked to the domain controllers o.
U.
So it shows the list of links and their states.
And of course, a GPO can be linked to multiple containers.
So this list could be more than one item here.
But in this case, it's only showing us one container where the GPO is linked to security group filtering.
In this case, the default security group filtering is in place.
But this could be other computer or user groups or user or computer accounts.
Individual accounts.
Remember I said that this is the dialog you use to control any security group filtering on a GPO and
then WMI filtering is listed down here and it will show if there are any WMI filters linked to this
GPO.
It will show those WMI filters and then the GPO Settings tab.
It shows us the actual settings that are defined in the GPO in this kind of HTML format.
And if you right click anywhere in this report, it will allow you to save it as HTML or XML so that
you could potentially save this off and use it at another time to look at the settings that are contained
in this GPO.
And then finally, this is a little bit off the, the properties of the GPO, but within the view menu
in PMC, there are a set of view options on the data within the group policy management console.
And I've sort of focused on these three because they tend to be the most interesting and the most often
used.
The first one is checked by default, enable trust detection, and this just lets you limit the domains
that are shown or the forests that are shown to only those that have two way trusts.
If there's only a one way trust, then they wouldn't be shown in in the PMC console.
The second option show domain controllers after domain names is probably one of the ones that I use
most frequently.
And when you enable that, as I'll show you in the next demo, it gives you the ability to see the domain
controller that you're connected to and performing operations against when you're using the PMC and
subsequently the editor.
Just a note by default, all ghp management operations are typically done against the PDC emulator domain
controller in the domain.
So that's the default state.
You can actually come into M.S. and change that, and I'll talk about that in a later section.
But this is essentially showing you which domain controller you're connected to.
And then this last show, confirmation dialog, that is, you'll get a warning whenever you performing
operations on GPOs or GPO links to let you know that the operation you're performing is perhaps on a
link rather than on the real GPO.
And this will come up, if you'll remember, I just mentioned that if you try to delete a link, all
it's deleting is the link, not the GPO.
And that warning will come up if this box is checked whenever that kind of an operation happens.