Implementing a Group Policy Infrastructure Flashcards

Question

1. Where would you create a WMI filter? 2. When implementing a GPO with a WMI filter do you create multiple WMI filters or only a single incorperating many systems?

Answer 1

1. Where would you create a WMI filter? * Open the GPMC (Group Policy Management Console) * Select the Domain * Right-Click WMI Filters * Click New.. 2. When implementing a GPO with a WMI filter do you create multiple WMI filters or only a single incorperating many systems? * You create a single WMI Filter that would fit all systems/requirements

Answer 2

* Computer Configuration -\> Policies -\> Administractive Templates -\> System -\> Group Policy * Configure user Group Policy loopback processing mode

Answer 3

* Replace: The Computer and User policies are applied only based on the policies that apply to the computer (i.e. meaning the user policies are applied from GPOs like the user was in the same OU as the computer) * Merge: The User policies are applied from where the user is and the user policies where the computer is located is merged. (I.E. the policies that is in the computer OU will overwrite or add additional settings to the user settings)

Answer 4

1. What are the different ways that you can force a Group Policy Update? * In the GPMC * Right-Click the OU * Select Group Policy Update... * Click Yes * CMD * on the PC gpupdate /force * PowerShell * On the PC: Invoke-GPUpdate -Force * Remote PC: Invoke-GPUdate -Computer " [PC Name] " 2. What does forcing an Update do? * Reapplies all policy settings. By default, only policy settings that have changed are applied.

Answer 5

The computer policy is applied over the user

Answer 6

1. In the GPME (Group Policy Management Editor), right clikc on the policy, select properties, select comment tab 2. In the policy you are setting there is a comment block that you can save as well.

Answer 7

It sets them as standards but user can always change them.

Answer 8

C - Create R - Replace U - Update D - Delete

Answer 9

* Create – is very low impact and low risk–it’s a “safe” move. E.g. If this mapping or connection does not exist, then create it. Otherwise, if it does exist, then do nothing. * Replace – It will not only create new objects, but destroy old ones, too. No matter what, you are getting this new object. * Update – You might overwrite something. You can update the object with new settings, or create the object if it doesn’t exist. However, you should note: it does not remove or destroy any objects. Update cannot delete anything, like Replace can. * Delete – This is exactly what it sounds like: delete the object. Just get rid of it.

Answer 10

Disable the Group Policy Link

Answer 11

Client-side extensions interpret setting in a GPO to make appropriate changes to the local computer or to the currently logged-on user

Answer 12

Security settings reapply every 16 hours even if a GPO has not changed.

Answer 13

You would configure the GPO: Configure \< CSE Name \> preference extension policy procssing EX. Configure Drive Maps preference extension policy procssing

Answer 14

1. No - it might only receive cached policies 2. Enable the GPO: Always wait for the network at startup and logon * Note: the GPO lives here: Computer Configuration\Policies\Administrative Templates\System\Logon

Answer 15

By the GPOs Version number

Answer 16

* For Windows Server 2008, Windows Server 2008 R2, Windows Server 2003, and Windows 2000: FRS replicates SYSVOL * For Windows Server 2008 or newer: you can configure SYSVOL replication by using DFS Replication

Answer 17

1. It determins whether the connectiong should be considered a slow link. Each CSE then used that to determin whether to apply settings or not. By default a link is considered slow if it is less than 500 kbps 2.

Answer 18

Slow link processing: On Can be changed: No

Answer 19