Computer Configuration for Group Policy

The Computer Configuration section of a GPO deals with general policies of specific computers. These policies affect all users who log onto that computer. Computer Configuration is divided into different sections: Software Settings, Windows Settings, Administrative Templates. There’s no intrinsic logic to this division, you just have to get used to knowing where to find…

Read More

User Configuration Group Policy

User Configuration applies to all users in the site, domain or Organizational Unit that the GPO applies to. User Configuration is applied at logon, whereas Computer Configuration is applied when the computer is started. Use the buttons below to navigate through the lesson Many of the policies in User Configuration are similar to those applied…

Read More

Group Policy Inheritance

Group policy inheritance affects the order in which different policies are processed. This may not sound impressive, but it’s important. Sadly, this is only true up to a point. There are other considerations. For example, a later GPO may not make any conflicting changes to an earlier policy so the earlier policy appears to survive.…

Read More

Introduction to Group Policy

Group policies are used to restrict what a user can and can’t do. For example, they can be used to remove the “run” command from a users start menu, or to set a specific background image. Group policies are very similar to the local policies , but on a workstation computer the Domain group policy…

Read More

Creating Site Links

The Default Site Link is a 56Kpbs dial-up connection which uses the IP protocol. However, SMTP is recommended for this connection. A schedule will be set on the site link so that replication traffic can only use the WAN link after office hours and when the link is available. Use the buttons below to navigate…

Read More

Creating and Administering Sites

In order to control replication, two sites will need to be created, one for the main domain  and one for Brighton. Subnets will need to be defined and eventually a Site-link created. Use the buttons below to navigate through the lesson Sites are administered through the Active Directory Sites and Services snap-in. From the forest’s…

Read More

Active Directory Sites and Replication

Even in the smallest of domains Microsoft recommends that there is more than one Domain Controller. This provides fault tolerance and can enhance performance for clients. Every Domain Controller contains a read/write copy of the Active Directory Database. Each Domain Controller must store the same database. In order for the Active Directory database to remain…

Read More

Configuring FSMO Roles

If you’ve designed and built your own domain or forest you’ll know which servers host the various Master Operations. If you’ve inherited the administration of an existing structure, find out where these things are  straight away, before they go wrong. Use the buttons below to navigate through the lesson Changing FSMO Roles The Single Master…

Read More

Operations Masters

Windows Server uses a multi-master format for domain controllers but there are some network tasks that can only be performed on single, designated computers. These are called Flexible Single Master Operations (FSMOs). These single computers are Domain Controllers called Operations Masters, and they are the only ones which will accept changes, even though these changes…

Read More

Creating and Administering Trusts 2003

When creating a trust you will need to verify  that both domains can see each other and resolve names. This may involve configuring the respective Domain’s DNS servers. Use the buttons below to navigate through the lesson Trusts are managed through the Active Directory Domains and Trusts console. Click on Start. Select Administrative Tools. Select…

Read More