So now I'm going to review what we just talked about.
Just so it's crystal clear.
Let's see the GPO that we're focused on right now.
Default domain controllers policy.
Oh, by the way, if I click into this, I can change the name of this GPO just as soon as I type in
a new value.
So just be aware of that.
It's easy to change the name of a GPO in the PMC.
There's really no downside to doing it because everything that clients care about in terms of processing
GPO is tied to that quid, which is a good segway into talking about the Details tab.
The Details Tab provides a bunch of information about this GPO.
What I called in my previous section, the metadata.
So here's the guide of the GPO.
This is the unique identifier that never changes, regardless of what the name of the GPO might be.
So this value is always constant through the life of the GPO.
And in fact, the two GPOs that Windows creates when you first promote an Active Directory domain controller
into a new domain are the default domain controllers policy and the default domain policy.
And they always have the same quid.
So the quid that you see will be the same for the default domain controllers policy in this domain or
any other domain running Active Directory.
Now the version information I mentioned briefly in my previous discussion and what this relates to is
it tells you how many changes have been applied to each side of the GPO.
And the number that you're interested in is really the, the numeric value.
The fact that it shows the ad side and the system side is something that will get into a little on in
this course.
But essentially Active Directory GPOs are really in two parts.
One part is in the ad and the other part is in system all.
And the system all replicates those around just as aid does.
And so this is telling you that there's a version number kept on the system, all part of the GPO and
a version number kept on the aid part.
And those are in sync, which is what you want to see.
You want to see these both being the same number.
In this case.
On the computer side, you can see that one change was made to the computer side of this GPO and that
it exists as number one or version number one in ad and sizzle.
And then of course, we've got last modified date.
This tells you when the last time a change was made to the GPO and the date the GPL was created.
The owner information.
This gets populated automatically by whichever user or group has created this GPO.
So it's pretty straightforward.
And typically you don't change that.
You don't go in and change the owner.
There's there's no real reason to under the scope tab.
Remember that I said that we list the links that this GPO has.
So in this case, it's linked to the domain controllers.
Oh, you.
The link is enforced or not enforced, and the link is enabled.
And this is the path, the full path to that.
Oh, you remember when I talked about Enforced?
That means that this link is not forcing down these settings on this O.U.
And anything underneath this O.U.
So if I right click this, I could very easily set this to enforce.
I can also disable a link.
This is not quite the same as deleting a link.
So if I disable a link effectively the GPO is ignored.
That's linked to this container.
But it's not completely gone as if I were deleting it so I can come back in.
Let's say I want to test something and I don't want this GPIO to take effect on the domain controllers.
Oh, you.
I can temporarily check this box to disable that link and then come back in later and enable it again.
So it's a simple matter of sort of temporarily turning off the GPO on this container.
Again, the security filtering.
I talked about this in a previous module.
But this is showing what security filters are on this GPO and what WMI filters are.
Link to this GPO remembering again that only one WMI filter can be linked to a GPO at a time.
And then finally, the Settings report.
Again, this is the report that shows you all of the settings that are applied or that are defined within
this GPO and it shows them in sort of that hierarchical format that you would see in GP.
ED So you can drill in and look at whichever policy area you're interested in.
This one only has computer side settings, but if this were another GPL with the user side settings,
they would be listed here just like they are here.
And as I mentioned, you can right click on this.
You can edit the GPO, you can print this HTML report or you can save the report.
And it gives you an option of saving it to either HTML or XML, depending on what you're trying to accomplish.
In most cases, if you save it as HTML, then you can publish it as a HTML file on a Web site if you
wanted to.
Now you'll remember that I also mentioned this View Options menu in the PMC, and let's just go through
that quickly.
So I've got I can do some control of what is displayed in each of the different views within the group
policy management console.
I can also make some changes to how reporting is done.
This first option relates to the old dot Adam files.
These are the admin template files that preceded Adam X.
Normally they're going to look in the default local folder, then insist, well, for these Adam files,
the Adam files are used during reporting to resolve registry values to their friendly names as they
appear in editor.
You can also have the option.
I haven't talked about having administrative template comments, but there is the facility to actually
put comments within only within administrative template settings.
So you can go ahead and view those in the PMC settings reports if you wanted to using this checkbox
here.
And then again, going back to the general tab, this is where I showed you some of these options for
showing domain controllers, showing confirmation of the distinction between links and GPOs.
I'm just going to go ahead and check this one here so you can kind of see what happens.
So you'll notice here that the display changed and now it's showing me which DC I'm focused on within
PMC.
This is useful if you have a large number of DCS and you want to change DCS that you're focused on,
or at least see what you're focused on at any given time.
I can actually change it by going here and saying, change domain controller.
And in this domain I only have one.
DC but if there are other DC in this domain, I could pick one, choose this and pick that.
DC And I would be focused on that other DC.
And that would mean that any edits that I did to GPOs or any reporting I did were done against that
other DC.