Information Technology Reference
In-Depth Information
Case Project 3-2: Explaining GPOs
The owner of Cool Gadgets has told you he needs to lock down some desktops so that
these users can't access certain Windows components, such as Control Panel. He also
wants some standardization in the look of users' desktops, such as wallpaper and so forth.
However, he's not sure how to make these changes without affecting all users and com-
puters. Write a short explanation of how GPOs can be applied. Include information about
how policies defined in one place can take precedence over policies defined elsewhere.
3
Case Project 3-3: Creating the Group Policy Structure
After explaining to the owner of Cool Gadgets how GPOs work, you sit down with him to
work out the details of the policies he wants enacted. He says he wants all users locked out
of Control Panel except users in the Engineering Department, who should have normal
access to Control Panel. In addition, he wants all computers in the domain to have audit-
ing enabled for all logon events. Finally, users in the Marketing Department should have a
new application made available to them on any computer in the company where they log
on. For each requirement, indicate whether a new GPO needs to be created. Also, include
where any new GPO will be applied, the path to the policy, and the policy setting to be
applied. Use the following format (the answer to the first requirement is given):
Policy requirement:
Lock out all users from Control Panel with the exception of Engineering
Department users
GPO required:
Default Domain Policy applied to the domain
Path to policy:
User Configuration\Policies\Administrative Templates\Control Panel\Prohibit
access to the Control Panel
Policy setting:
Enabled
GPO required:
New, applied to the Engineering OU
Path to policy:
User Configuration\Policies\Administrative Templates\Control Panel\Prohibit
access to the Control Panel
Policy setting:
Disabled
Search WWH ::
Custom Search