Configuring Group Policy - MCTS Guide to Microsoft Windows Server 2008 Active Directory Configuration - page 266

11. Click TestGP1GPO in the right pane and click the up arrow to the left of the Link Order
column. TestGP1GPO now has link order 1 and TestOUGPO has link order 2, so
TestGP1GPO takes precedence if any settings conflict.
12. Right-click TestGP1GPO and click Delete . Click OK in the message box asking you to con-
firm the deletion. Next, right-click TestOUGPO and click Delete , and then click OK in the
message box. No policies should be linked to TestOU now.
13. Click to expand TestGP1 . Right-click TestOUGPO and click Delete , and then click OK in
the message box. Only TestGP1GPO should be linked to TestGP1 at this point.
14. Leave GPMC and Active Directory Users and Computers open for the next activity.

Activity 7-5: Configuring and Testing a GPO

Time Required: 20 minutes
Objective: Configure and test a GPO.
Description: Now that you have a new GPO and an OU to test it on, you move the computer account
representing your client Vista computer to the new OU and test some computer settings in the GPO.
1. Log on to your server as Administrator and open Active Directory Users and Computers, if
necessary.
2. Click the Computers folder, and drag your computer account to the TestGP1 OU. If neces-
sary, click Yes in the warning message about moving Active Directory objects.
3. Open GPMC, if necessary. Click the TestGP1 OU. Right-click TestGP1GPO and click Edit
to open it in Group Policy Management Editor.
4. In GPME, click to expand Computer Configuration , Policies , Windows Settings , Security
Settings , and Local Policies , and then click User Rights Assignment .
5. In the right pane, double-click Allow log on locally to open its Properties dialog box. Notice that
the policy setting is Not defined. Click the Define these policy settings check box, and then click
Add User or Group . In the Add User or Group dialog box, click Browse . Type Administrators
in the Enter the object names to select text box, and click Check Names . Click OK three times.
6. On your Vista computer, log on to the domain as Administrator. Click Start , point to
Administrative Tools , and click Local Security Policy . The Local Security Policy MMC con-
tains only the security settings for the local computer and is the section of the policy that
was modified in Step 5.
7. Click to expand Local Policies and then click User Rights Assignment . Notice in Figure 7-9
that the icon next to the Allow log on locally policy looks like two towers and a scroll
instead of the torn-paper icon next to the other policies. This icon indicates that the policy
is defined by a domain GPO.

Figure 7-9 The Local Security Policy MMC