Оглавление
Jeremy Moskowitz. Group Policy
Copyright
Credits
Dedication
Acknowledgments
About the Author
About The Contributors
Introduction
Chapter 1. Group Policy Essentials
Getting Ready to Use This Book
Getting Started with Group Policy
Active Directory and Local Group Policy
An Example of Group Policy Application
Examining the Resultant Set of Policy
Group Policy, Active Directory, and the GPMC
Group Policy 101 and Active Directory
Our Own Group Policy Examples
Final Thoughts
Chapter 2. Managing Group Policy with the GPMC and via PowerShell
Common Procedures with the GPMC and PowerShell
Security Filtering and Delegation with the GPMC
Performing RSoP Calculations with the GPMC
Searching and Commenting Group Policy Objects and Policy Settings
Starter GPOs
Back Up and Restore for Group Policy
Migrating Group Policy Objects between Domains
GPMC At-a-Glance Icon View
Final Thoughts
Chapter 3. Group Policy Processing Behavior Essentials
Group Policy Processing Principles
Policy Application via Remote Access, Slow Links, and after Hibernation
Using Group Policy to Affect Group Policy
Final Thoughts
Chapter 4. Advanced Group Policy Processing
Fine-Tuning When and Where Group Policy Applies
Group Policy Loopback Processing
Group Policy with Cross-Forest Trusts
Final Thoughts
Chapter 5. Group Policy Preferences
Powers of the Group Policy Preferences
Group Policy Preferences Concepts
Group Policy Preferences Tips, Tricks, and Troubleshooting
Giving Group Policy Preferences a “Boost” (Using PolicyPak Preferences Manager and PolicyPak Cloud)
Final Thoughts
Chapter 6. Managing Applications and Settings Using Group Policy
Understanding Administrative Templates
Exploring ADM vs. ADMX and ADML Files
ADMX and ADML Files: What They Do and the Problems They Solve
The Central Store
Creating and Editing GPOs in a Mixed Environment
Using ADM and ADMX Templates from Other Sources
ADMX Migrator and ADMX Editor Tools
PolicyPak Application Manager
Final Thoughts
Chapter 7. Troubleshooting Group Policy
Under the Hood of Group Policy
The Birth, Life, and Death of a GPO
How Client Systems Get Group Policy Objects
Why Isn’t Group Policy Applying?
Client-Side Troubleshooting
Advanced Group Policy Troubleshooting with the Event Viewer Logs
Final Thoughts
Chapter 8. Implementing Security with Group Policy
The Two Default Group Policy Objects
The Strange Life of Password Policy
Inside Basic and Advanced Auditing
Restricted Groups
Restrict Software Using AppLocker
Controlling User Account Control with Group Policy
Wireless (802.3) and Wired Network (802.11) Policies
Configuring Windows Firewall with Group Policy
Final Thoughts
Chapter 9. Profiles: Local, Roaming, and Mandatory
Setting the Stage for Multiple Clients
What Is a User Profile?
Roaming Profiles
Mandatory Profiles
Final Thoughts
Chapter 10. The Managed Desktop, Part 1: Redirected Folders, Offline Files, and the Synchronization Manager
Redirected Folders
Offline Files and Synchronization
Using Folder Redirection and Offline Files over Slow Links
Final Thoughts
Chapter 11. The Managed Desktop, Part 2: Software Deployment via Group Policy
Group Policy Software Installation (GPSI) Overview
Assigning and Publishing Applications
Advanced Published or Assigned
Default Group Policy Software Installation Properties
Removing Applications
Using Group Policy Software Installation over Slow Links
MSI, the Windows Installer, and Group Policy
Deploying Office 2010 and Later Using Group Policy (MSI Version)
Installing Office Using Click-to-Run
System Center Configuration Manager vs. Group Policy (and Alternatives)
Final Thoughts
Chapter 12. Finishing Touches with Group Policy: Scripts, Internet Explorer, Hardware Control, Printer Deployment, Local Admin Password Control
Scripts: Logon, Logoff, Startup, and Shutdown
Managing Internet Explorer with Group Policy
Restricting Access to Hardware via Group Policy
Assigning Printers via Group Policy
Implementing Rotating Local Passwords with LAPS
Final Thoughts for This Chapter and for the Book
Appendix A. Scripting Group Policy Operations with Windows PowerShell
Using PowerShell to Do More with Group Policy
Replacing Microsoft’s GPMC Scripts with PowerShell Equivalents
Final Thoughts
Appendix B. Group Policy and VDI
Why Is VDI Different?
Tuning Your Images for VDI
Group Policy Tweaks for Fast VDI Video
Final Thoughts for VDI and Group Policy
Appendix C. Advanced Group Policy Management
The Challenge of Group Policy Change Management
Architecture and Installation of AGPM
What Happens after AGPM Is Installed?
Understanding the AGPM Delegation Model
AGPM Common Tasks
AGPM Tasks with Multiple Admins
Advanced Configuration and Troubleshooting of AGPM
Final Thoughts
Appendix D. Security Compliance Manager
SCM: Installation
LocalGPO Tool
Final Thoughts on LocalGPO and SCM
Appendix E
Microsoft Intune
PolicyPak Cloud
Final Thoughts on Microsoft Intune and PolicyPak Cloud
WILEY END USER LICENSE AGREEMENT
