1 00:00:03,030 --> 00:00:04,860 Let's summarize this chapter. 2 00:00:05,730 --> 00:00:11,580 We started off by learning about how to get the PMC installed as part of the remote server administration 3 00:00:11,580 --> 00:00:12,060 tools. 4 00:00:12,960 --> 00:00:18,900 Remember that you can download the standalone RCA t package for either Windows seven or Windows ten 5 00:00:18,900 --> 00:00:19,440 versions. 6 00:00:20,340 --> 00:00:23,670 But it is a feature in any of the server SKUs. 7 00:00:24,570 --> 00:00:29,430 So you could run server manager and added through the add features and rolls function. 8 00:00:30,300 --> 00:00:36,090 Once you've got PMC installed, you can use it to manage multiple domains and forests as long as there's 9 00:00:36,090 --> 00:00:37,200 trust in between them. 10 00:00:38,070 --> 00:00:42,570 So remember that you can potentially link GPOs across domains or forests. 11 00:00:42,720 --> 00:00:46,140 Although I mentioned there are some performance downsides to doing so. 12 00:00:46,980 --> 00:00:53,610 Now BMC provides kind of a centric view of Active Directory, so it's really not meant to replace or 13 00:00:53,610 --> 00:00:56,700 be used instead of tools like ADD users and computers. 14 00:00:57,570 --> 00:01:01,470 But it is a great tool for giving you the GPO centric view. 15 00:01:02,310 --> 00:01:08,160 Again, it doesn't show computer objects or user objects in AD, but it does show the old structures, 16 00:01:08,340 --> 00:01:13,680 the sites that are available and containers you care about when it comes to linking and targeting GPOs. 17 00:01:14,580 --> 00:01:20,970 So it's really kind of a hub for group policy management, for creation, for editing, linking, reporting 18 00:01:20,970 --> 00:01:21,990 and troubleshooting. 19 00:01:22,830 --> 00:01:29,100 And as far as creating and editing goes, PMC is the place you start when you need to create new GPOs 20 00:01:29,100 --> 00:01:30,300 or added GPOs. 21 00:01:31,230 --> 00:01:37,140 From an editing perspective, when you right click a GPO and choose edit, it launches this GP management 22 00:01:37,140 --> 00:01:37,590 editor. 23 00:01:38,480 --> 00:01:41,210 Or I simply call it the ED. 24 00:01:42,160 --> 00:01:46,450 Focused on the domain based GPO and lets you make changes to settings. 25 00:01:47,360 --> 00:01:52,160 And you can also from that editor add comments to the GPO. 26 00:01:53,030 --> 00:01:56,990 So you can see sort of what kinds of things have happened on that GPO. 27 00:01:57,830 --> 00:02:02,960 You can use it to annotate changes to the GPO or whatever you really want to use it for. 28 00:02:02,990 --> 00:02:04,370 It's a free form text. 29 00:02:05,270 --> 00:02:07,790 Then you can view that from the details tab. 30 00:02:07,840 --> 00:02:14,540 Once the GPO is highlighted and just to kind of finalize that thought, remember that the GPO has a 31 00:02:14,540 --> 00:02:19,850 number of tabs available to it that provide everything from those metadata around the GPO, like how 32 00:02:19,850 --> 00:02:26,150 many changes have been made to it when it was last modified, what its status is to the Settings report 33 00:02:26,150 --> 00:02:32,240 that lets you generate an HTML or an XML report of all the settings that are available in the GPO, 34 00:02:33,080 --> 00:02:36,260 the scope tab that lets you see the targeting of the GPO. 35 00:02:36,320 --> 00:02:41,300 So where it's linked, the security group filters or WMI filters that are applied to it. 36 00:02:42,200 --> 00:02:47,120 So it's really kind of a complete place to go for most of your management tasks.