Question

Group Policies

Research GROUP POLICY OBJECTS (GPO'S)

You can start in the Windows Server 2012 eBook

From what you read(are reading) about GPO's. Start a conversation about the general use.

When and why would you want to use GPO's?

What would be the impact of a large domain without the use of GPO's?

Answer 1

In the Windows 2000 operating system, a Group Policy Object (GPO) is a collection of settings that define what a system will look like and how it will behave for a defined group of users. Microsoft provides a program snap-in that allows you to use the Group Policy Microsoft Management Console (MMC). The selections result in a Group Policy Object. The GPO is associated with selected Active Directory containers, such as sites, domains, or organizational units (OUs). The MMC allows you to create a GPO that defines registry-based polices, security options, software installation and maintenance options, scripts options, and folder redirection options.

Why do we need GPO?

Assuming the goal of your organization is to become more secure, then yes, you need to understand and implement group policies.

Out-of-the-box Windows isn’t secure..

There are ways to rectify those deficiencies through GPOs. Microsoft didn’t assume how you wanted to secure your systems, but GPOs can move you closer.

For example, with GPOs you can completely disable Local Administrator rights globally in your network and instead, grant administrative permissions to a single individual or group based on their job. Ideally, you are implementing a least-privileged model where even the system administrators are limited to administering only the servers they are assigned.

Group policies can disable outdated protocols like SSLv2, prevent users from making changes to local group policies, and much more.

There are several advantages to implementing GPOs outside of security.

• Ease of management: Setting up new users on the network used to be a long and tedious process. Pre-existing GPOs apply a standardized environment to each new user and computer that joins your domain which saves many hours of configurations.
• One-stop administration: Sysadmins can deploy patches, software, and other updates via GPO.
• Password policy enforcement: Passwords can be easily brute-forced if they aren’t changed regularly, contain simple words, or are short. GPOs establish length, reuse rules, and other requirements for passwords to keep your network safe.
• Folder redirections: Do you want users to keep important company files on a centralized and monitored storage system? Use a folder redirection GPO to redirect their user folder to your NAS.