You are previewing Group Policy.
O'Reilly logo
Group Policy

Book Description

Get up to speed on the latest Group Policy tools, features, and best practices

Group Policy, Fundamentals, Security, and the Managed Desktop, 3rd Edition helps you streamline Windows and Windows Server management using the latest Group Policy tools and techniques. This updated edition covers Windows 10 and Windows Server vNext, bringing you up to speed on all the newest settings, features, and best practices. Microsoft Group Policy MVP Jeremy Moskowitz teaches you the major categories of Group Policy, essential troubleshooting techniques, and how to manage your Windows desktops.

This is your complete guide to the latest Group Policy features and functions for all modern Windows clients and servers, helping you manage more efficiently and effectively.

  • Perform true desktop and server management with the Group Policy Preferences, ADMX files, and additional add-ons
  • Use every feature of the GPMC and become a top-notch administrator
  • Troubleshoot Group Policy using tools, enhanced logs, Resource Kit utilities, and third-party tools
  • Manage printers, drive maps, restrict hardware, and configure Internet Explorer
  • Deploy software to your desktops, set up roaming profiles, and configure Offline Files for all your Windows clients—and manage it all with Group Policy settings
  • Secure your desktops and servers with AppLocker, Windows Firewall with Advanced Security, and the Security Configuration Manager

This is your comprehensive resource to staying current, with expert tips, techniques, and insight.

Table of Contents

  1. Titlepage
  2. Copyright
  3. Credits
  4. Dedication
  5. Acknowledgments
  6. About the Author
  7. About The Contributors
  8. Introduction
  9. Chapter 1: Group Policy Essentials
    1. Getting Ready to Use This Book
    2. Getting Started with Group Policy
    3. Active Directory and Local Group Policy
    4. An Example of Group Policy Application
    5. Examining the Resultant Set of Policy
    6. Group Policy, Active Directory, and the GPMC
    7. Group Policy 101 and Active Directory
    8. Our Own Group Policy Examples
    9. Final Thoughts
  10. Chapter 2: Managing Group Policy with the GPMC and via PowerShell
    1. Common Procedures with the GPMC and PowerShell
    2. Security Filtering and Delegation with the GPMC
    3. Performing RSoP Calculations with the GPMC
    4. Searching and Commenting Group Policy Objects and Policy Settings
    5. Starter GPOs
    6. Back Up and Restore for Group Policy
    7. Migrating Group Policy Objects between Domains
    8. GPMC At-a-Glance Icon View
    9. Final Thoughts
  11. Chapter 3: Group Policy Processing Behavior Essentials
    1. Group Policy Processing Principles
    2. Policy Application via Remote Access, Slow Links, and after Hibernation
    3. Using Group Policy to Affect Group Policy
    4. Final Thoughts
  12. Chapter 4: Advanced Group Policy Processing
    1. Fine-Tuning When and Where Group Policy Applies
    2. Group Policy Loopback Processing
    3. Group Policy with Cross-Forest Trusts
    4. Final Thoughts
  13. Chapter 5: Group Policy Preferences
    1. Powers of the Group Policy Preferences
    2. Group Policy Preferences Concepts
    3. Group Policy Preferences Tips, Tricks, and Troubleshooting
    4. Giving Group Policy Preferences a “Boost” (Using PolicyPak Preferences Manager and PolicyPak Cloud)
    5. Final Thoughts
  14. Chapter 6: Managing Applications and Settings Using Group Policy
    1. Understanding Administrative Templates
    2. Exploring ADM vs. ADMX and ADML Files
    3. ADMX and ADML Files: What They Do and the Problems They Solve
    4. The Central Store
    5. Creating and Editing GPOs in a Mixed Environment
    6. Using ADM and ADMX Templates from Other Sources
    7. ADMX Migrator and ADMX Editor Tools
    8. PolicyPak Application Manager
    9. Final Thoughts
  15. Chapter 7: Troubleshooting Group Policy
    1. Under the Hood of Group Policy
    2. The Birth, Life, and Death of a GPO
    3. How Client Systems Get Group Policy Objects
    4. Why Isn’t Group Policy Applying?
    5. Client-Side Troubleshooting
    6. Advanced Group Policy Troubleshooting with the Event Viewer Logs
    7. Final Thoughts
  16. Chapter 8: Implementing Security with Group Policy
    1. The Two Default Group Policy Objects
    2. The Strange Life of Password Policy
    3. Inside Basic and Advanced Auditing
    4. Restricted Groups
    5. Restrict Software Using AppLocker
    6. Controlling User Account Control with Group Policy
    7. Wireless (802.3) and Wired Network (802.11) Policies
    8. Configuring Windows Firewall with Group Policy
    9. Final Thoughts
  17. Chapter 9: Profiles: Local, Roaming, and Mandatory
    1. Setting the Stage for Multiple Clients
    2. What Is a User Profile?
    3. Roaming Profiles
    4. Mandatory Profiles
    5. Final Thoughts
  18. Chapter 10: The Managed Desktop, Part 1: Redirected Folders, Offline Files, and the Synchronization Manager
    1. Redirected Folders
    2. Offline Files and Synchronization
    3. Using Folder Redirection and Offline Files over Slow Links
    4. Final Thoughts
  19. Chapter 11: The Managed Desktop, Part 2: Software Deployment via Group Policy
    1. Group Policy Software Installation (GPSI) Overview
    2. Assigning and Publishing Applications
    3. Advanced Published or Assigned
    4. Default Group Policy Software Installation Properties
    5. Removing Applications
    6. Using Group Policy Software Installation over Slow Links
    7. MSI, the Windows Installer, and Group Policy
    8. Deploying Office 2010 and Later Using Group Policy (MSI Version)
    9. Installing Office Using Click-to-Run
    10. System Center Configuration Manager vs. Group Policy (and Alternatives)
    11. Final Thoughts
  20. Chapter 12: Finishing Touches with Group Policy: Scripts, Internet Explorer, Hardware Control, Printer Deployment, Local Admin Password Control
    1. Scripts: Logon, Logoff, Startup, and Shutdown
    2. Managing Internet Explorer with Group Policy
    3. Restricting Access to Hardware via Group Policy
    4. Assigning Printers via Group Policy
    5. Implementing Rotating Local Passwords with LAPS
    6. Final Thoughts for This Chapter and for the Book
  21. Scripting Group Policy Operations with Windows PowerShell
    1. Using PowerShell to Do More with Group Policy
    2. Replacing Microsoft’s GPMC Scripts with PowerShell Equivalents
    3. Final Thoughts
  22. Group Policy and VDI Not everyone is flocking to virtual desktop infrastructure (VDI). Most still have a standard desktop and laptop running the operating system on the actual machine itself.
    1. Why Is VDI Different?
    2. Tuning Your Images for VDI
    3. Group Policy Tweaks for Fast VDI Video
    4. Final Thoughts for VDI and Group Policy
  23. Advanced Group Policy Management
    1. The Challenge of Group Policy Change Management
    2. Architecture and Installation of AGPM
    3. What Happens after AGPM Is Installed?
    4. Understanding the AGPM Delegation Model
    5. AGPM Common Tasks
    6. AGPM Tasks with Multiple Admins
    7. Advanced Configuration and Troubleshooting of AGPM
    8. Final Thoughts
  24. Appendix D: Security Compliance Manager
    1. SCM: Installation
    2. LocalGPO Tool
    3. Final Thoughts on LocalGPO and SCM
  25. Appendix E: Microsoft Intune and PolicyPak Cloud
    1. Microsoft Intune
    2. PolicyPak Cloud
    3. Final Thoughts on Microsoft Intune and PolicyPak Cloud
  26. End-User License Agreement