Exploring Group Policy Administration 5

Lab 7

Name:

Exploring group

policy

administration

This lab contains the following projects and activities:

Project 7.1
Project 7.2
Project 7.3
Project 7.4 / Configuring the Local Computer Policy
Configuring Processing Order
Configuring Priority Order
Using Block Policy Inheritance and Enforce
Project 7.5 / Using Group Policy Loopback Processing
Post-Lab Cleanup
Project 7.1 / Configuring the Local Computer Policy
Overview / You need to prepare your test lab for your upcoming experiments. First, remove a child domain that you have configured. Then, configure a member server as a member of the remaining forest root domain. Finally, test the implementation of a Local GPO before you move on to testing Group Policy Objects (GPOs.)
Outcomes / After completing this exercise, you will know how to:
Demote a domain controller to member server status.
View and configure the local computer policy.
Completion time / 35 minutes
Precautions / Both parts of this exercise should only be performed on the even-numbered computers. If you have completed the optional exercises in Lab 2, follow all of the steps in this lab. If you skipped the optional exercises, begin with step 7 of Part A.
Question 1 / Do you see the Properties menu option?
Project 7.2 / Configuring Processing Order
Overview / The administrators in Calabar and Cairo are concerned with the potential implication of domain-wide policies. Specifically, they are concerned about domain policies overriding configured computer settings. You want to find out if they are correct.
Outcomes / After completing this exercise, you will know how to:
Create and link a domain-based Group Policy Object.
Completion time / 30 minutes
Precautions / N/A
Question 2 / Do you see the Properties menu option? Based on the results, what does this tell you about how Group Policy Objects are processed?
Question 3 / Do you see a Search menu option? Do you see a Help and Support menu option?
Question 4 / Do you see the Properties context menu option?
Question 5 / Do you see a Search menu option? Do you see a Help and Support menu option?
Question 6 / Do you see the Properties context menu option?
Project 7.3 / Configuring Priority Order
Overview / Administrators in Baarn tell you that they have created several child OUs. They want to know what will happen when they link two conflicting policies on the same OU.
Outcomes / After completing this exercise, you will know how to:
Test the application of multiple Group Policy Objects.
Completion time / 10 minutes
Precautions / During this exercise, you will be switching back and forth between the odd- and even-numbered computers. When you switch from one computer to another, perform all steps on that computer until you are instructed to switch computers again.
Question 7 / Can you see the Properties option when you right-click the Computer icon? Why did the AddComputerProperties1 GPO link not add this option to the Computer icon's right-click context menu?
Question 8 / Can you see the Properties menu option? Why did the AddComputerProperties1 GPO add this option to the Computer icon's context menu?
Project 7.4 / Using Block Policy Inheritance and Enforce
Overview / It is not necessary that all GPO settings apply to all users or computers in the domain. Some users and computers do not need to receive some of the configuration options. You want to be able to control which settings are inherited from the domain by specific OUs.
Outcomes / After completing this exercise, you will know how to:
Test the application of the Block Policy Inheritance and Enforce settings.
Completion time / 25 minutes
Precautions / During this exercise, you will be switching back and forth between the odd- and even-numbered computers. When you switch from one computer to another, perform all steps on that computer until you are instructed to switch computers again.


Question 9 / Do you see a Search menu option? Do you see a Help and Support menu option?
Question 10 / Do you see the Properties context menu option?
Question 11 / Do you see a Search menu option? Do you see a Help and Support menu option?
Question 12 / Do you see the Properties context menu option?
Question 13 / Do you see a Search menu option? Do you see a Help and Support menu option?


Question 14 / Do you see the Properties context menu option?
Project 7.5 / Using Group Policy Loopback Processing
Overview / Each top-level OU in your company has a single child OU called Employee-Access. Each of these OUs contains two computers that users visiting from other countries can use. These systems are a concern for all administrators, because administrators want visiting users to be subject to stricter controls than employees based at that location. You need to set up a method for securing these Employee-Access computers so that the desktops used by visiting users are locked down.
Outcomes / After completing this exercise, you will know how to:
Configure Group Policy Loopback Processing.
Completion time / 20 minutes
Precautions / During this exercise, you will be switching back and forth between the odd- and even-numbered computers. When you switch from one computer to another, perform all steps on that computer until you are instructed to switch computers again.
Question 15 / Why are you able to access the Control Panel using L7DomUser credentials?
Question 16 / Are you able to access Control Panel?