Implementing a Group Policy Infrastructure - PowerShell

Question 1

What does the following PowerShell CmdLet Do?

Backup-GPO

Answer 1

Backs up one GPO or all the GPOs in a domain.

Question 2

What does the following PowerShell CmdLet Do?

Copy-GPO

Answer 2

Copies a GPO.

Question 3

What does the following PowerShell CmdLet Do?

Get-GPInheritance

Answer 3

Retrieves Group Policy inheritance information for a specified domain or OU.

Question 4

What does the following PowerShell CmdLet Do?

Get-GPO

Answer 4

Gets one GPO or all the GPOs in a domain.

Question 5

What does the following PowerShell CmdLet Do?

Get-GPOReport

Answer 5

Generates a report either in XML or HTML format for a specified GPO or for all GPOs in a domain.

If you do not specify a path for a file to be created it displays the xml or html on screen

Question 6

What does the following PowerShell CmdLet Do?

Get-GPPermission

Answer 6

Gets the permission level for one or more security principals on a specified GPO.

Question 7

What does the following PowerShell CmdLet Do?

Get-GPPrefRegistryValue

Answer 7

Retrieves one or more Registry preference items under either Computer Configuration or User Configuration in a GPO.

Question 8

What does the following PowerShell CmdLet Do?

Get-GPRegistryValue

Answer 8

Retrieves one or more registry-based policy settings under either Computer Configuration or User Configuration in a GPO.

Question 9

What does the following PowerShell CmdLet Do?

Get-GPResultantSetOfPolicy

Answer 9

Outputs the Resultant Set of Policy (RSoP) information for a user, a computer, or both to a file.

Question 10

What does the following PowerShell CmdLet Do?

Get-GPStarterGPO

Answer 10

Gets one Starter GPO or all Starter GPOs in a domain.

Question 11

What does the following PowerShell CmdLet Do?

Import-GPO

Answer 11

Imports the Group Policy settings from a backed-up GPO into a specified GPO.

Question 12

What does the following PowerShell CmdLet Do?

Invoke-GPUpdate

Answer 12

Schedule a remote Group Policy refresh (gpupdate) on the specified computer.

Question 13

What does the following PowerShell CmdLet Do?

New-GPLink

Answer 13

Links a GPO to a site, domain, or organizational unit (OU).

Question 14

What does the following PowerShell CmdLet Do?

New-GPO

Answer 14

Creates a new GPO.

Question 15

What does the following PowerShell CmdLet Do?

New-GPStarterGPO

Answer 15

Creates a new Starter GPO.

Question 16

What does the following PowerShell CmdLet Do?

Remove-GPLink

Answer 16

Removes a GPO link from a site, domain or OU.

Question 17

What does the following PowerShell CmdLet Do?

Remove-GPO

Answer 17

Deletes a GPO.

Question 18

What does the following PowerShell CmdLet Do?

Remove-GPPrefRegistryValue

Answer 18

Removes one or more Registry preference items from either Computer Configuration or User Configuration in a GPO.

Question 19

What does the following PowerShell CmdLet Do?

Remove-GPRegistryValue

Answer 19

Removes one or more registry-based policy settings from either Computer Configuration or User Configuration in a GPO.

Question 20

What does the following PowerShell CmdLet Do?

Rename-GPO

Answer 20

Assigns a new display name to a GPO.

Question 21

What does the following PowerShell CmdLet Do?

Restore-GPO

Answer 21

Restores one GPO or all GPOs in a domain from one or more GPO backup files.

Question 22

What does the following PowerShell CmdLet Do?

Set-GPInheritance

Answer 22

Blocks or unblocks inheritance for a specified domain or organizational unit (OU).

Question 23

What does the following PowerShell CmdLet Do?

Set-GPLink

Answer 23

Sets the properties of the specified GPO link.

Question 24

What does the following PowerShell CmdLet Do?

Set-GPPermission

Answer 24

Grants a level of permissions to a security principal for one GPO or all the GPOs in a domain.

Modifies the following permissions:

• Security Filtering (who the policy applies to)
• Delegation (Who can edit, read, delete, or modify security)

Question 25

# What does the following PowerShell CmdLet Do? Set-GPPrefRegistryValue

Answer 25

Configures a Registry preference item under either Computer Configuration or User Configuration in a GPO.

Question 26

# What does the following PowerShell CmdLet Do? Set-GPRegistryValue

Answer 26

Configures one or more registry-based policy settings under either Computer Configuration or User Configuration in a GPO.

Question 27

# What does the following command do? gpfixup

Answer 27

Fix domain name dependencies in Group Policy Objects and Group Policy links after a domain rename operation.

Question 28

# What does the following command do? dcgpofix What are the switches?

Answer 28

Recreates the default Group Policy Objects (GPOs) for a domain * /ignoreschema * Ignores the version of the Active Directory® schema when you run this command. Otherwise, the command only works on the same schema version as the Windows version in which the command was shipped. * /target

Question 29

​ 1. How do you recreate the Default Domain Policy GPO? 2. How do you recreate the Default Domain Controller Policy GPO?

Answer 29

1. dcgpofix /target:Domain 2. dcgpofix /target:DC

Question 30

# What does the following command do? gpresult

Answer 30

Displays the Resultant Set of Policy (RSoP) information for a remote user and computer. /s Specifies the name or IP address of a remote computer. Do not use backslashes. The default is the local computer. /u Uses the credentials of the specified user to run the command. The default user is the user who is logged on to the computer that issues the command. /p [] Specifies the password of the user account that is provided in the /u parameter. If /p is omitted, gpresult prompts for the password. /p cannot be used with /x or /h. /user [\] Specifies the remote user whose RSoP data is to be displayed. /scope {user | computer} Displays RSoP data for either the user or the computer. If /scope is omitted, gpresult displays RSoP data for both the user and the computer. [/x | /h] Saves the report in either XML (/x) or HTML (/h) format at the location and with the file name that is specified by the *FILENAME* parameter. Cannot be used with /u, /p, /r, /v, or /z. /f forces gpresult to overwrite the file name that is specified in the /x or /h option. /r Displays RSoP summary data. /v Displays verbose policy information. This includes detailed settings that were applied with a precedence of 1. /z Displays all available information about Group Policy. This includes detailed settings that were applied with a precedence of 1 and higher. /? Displays help at the command prompt.

Question 31

# What does the following command do? gpupdate

Answer 31

Updates Group Policy settings

Question 32

# What does the following command do? gpupdate /force

Answer 32

Reapplies all policy settings. By default, only policy settings that have changed are applied.

Question 33

# What does the following command do? gpresult /v

Answer 33

Displays verbose policy information. This includes detailed settings that were applied with a precedence of 1.

Question 34

# What does the following command do? gpresult /z

Answer 34

Displays all available information about Group Policy. This includes detailed settings that were applied with a precedence of 1 and higher.

Question 35

# What does the following command do? gpresult /v \> filename.txt

Answer 35

outputs all information to a text file

Question 36

# What does the following command do? gpresult [/x or /h]

Answer 36

Saves the report in either XML (/x) or HTML (/h) format at the location and with the file name that is specified by the FILENAME parameter. Cannot be used with /u, /p, /r, /v, or /z.

Question 37

What is the order in which group policy applies?

Answer 37

L - Local S - Site D - Domain OU - Organizational Unit

Question 38

When you have multiple GPOs linked in the same location, how do policies apply?

Answer 38

The are applied via Link Order (Precendence). Highest applies first. Lowest is applied last

Question 39

Where would you set permissions to let a user link Group Policy objects?

Answer 39

In the Domain Delegation

Question 40

What does enforcing a policy do?

Answer 40

Changes it ti be the last policy applied and is not blcoked from enheritance

Question 41

How would you give someone the rights to create Group Policy objects?

Answer 41

Add them to the AD Group Group Policy Creator/Owners