Before you start
Objectives: learn how to open and navigate trough pre-defined Group Policy console.
Prerequisites: you have to know what is Group Policy, and how to work in Microsoft Management Console.
Key terms: run Group Policy, Console organization, example settings, gpedit.msc, software settings, windows settings, administrative templates, password policy, security options.
Local Group Policy Console
We will use the beginning menu run command to open our native cluster Policy console. In Run menu, we will open Microsoft Management Console by writing in mmc, then add the cluster Policy Snap-in to our console. we will additionally open pre-defined cluster Policy console by writing gpedit.msc in Run menu.
Image 138.1 – Run Group Policy
Image 138.2 – Group Policy
Console Organization
There are two major sections – Computer Configuration section, and User Configuration section. If user settings are defined in AD, then they are independent of the computer on which the user logs on to. If settings are configured locally, settings are valid only for local users. User settings get applied at user log on.
Under Computer Configuration, as well as under User Configuration, there are three categories of setting:
- Software Settings are used to control the installation of software, and there are no local settings for this. This section can only be configured through AD.
- Windows Settings are used to set a wide range of system and startup values.
- Administrative Templates contain Registry-based policies.
Example Settings
Lets take a look at some Group Policy settings on a local Windows XP workstation.
Image 138.3 – Password Policy
Image 138.4 – Security Options
Notice that when we make a selection on the left, the right part of the window shows us two columns. In the first column we see a descriptive Policy name, and in the second column we see current settings for our Policies. If our computer is on a domain, then the current settings are a combination of local settings and settings defined in AD.
To edit a setting, just click double on policy name and choose the appropriate setting.
Remember
We can open pre-defined cluster Policy console by typewriting gpedit.msc in Run menu. There ar 2 major sections in cluster Policy console: pc Configuration section and User Configuration section. pc Configuration section contains settings that ar applied for the whole pc. User Configuration node contains settings that ar applied solely to users. code Settings ar wont to management the installation of code, and there are not any native settings for this. Windows Settings ar wont to set a good vary of system and startup values. body Templates contain Registry-based policies.