Windows Forensics and Incident Recovery

Group Policies

With the advent of Windows 2000, Microsoft opted to move away from the NT domain structure and toward the more flexible Active Directory (AD). Through AD, security settings can be set through the use of Group Policies. Group Policies allow administrators to configure and manage computer systems and users. Group policy objects (GPOs) can be used to perform management tasks and apply security settings throughout the enterprise. Group policies can also be used to enforce software restrictions, provide for software distribution and installation, and run computer- and user-based scripts. These capabilities and the overall functionality of Group Policies have been expanded with the release of Windows 2003. However, the use of Group Policies ...