Implementing a Group Policy Infrastructure - PowerShell Flashcards Preview

MCSA 70-411 - Global Knowledge > Implementing a Group Policy Infrastructure - PowerShell > Flashcards

Flashcards in Implementing a Group Policy Infrastructure - PowerShell Deck (41):
1

Backup-GPO

Backs up one GPO or all the GPOs in a domain.

2

Copy-GPO

Copies a GPO.

3

Get-GPInheritance

Retrieves Group Policy inheritance information for a specified domain or OU.

4

Get-GPO

Gets one GPO or all the GPOs in a domain.

5

Get-GPOReport

Generates a report either in XML or HTML format for a specified GPO or for all GPOs in a domain.

 

If you do not specify a path for a file to be created it displays the xml or html on screen

6

Get-GPPermission

Gets the permission level for one or more security principals on a specified GPO.

7

Get-GPPrefRegistryValue

Retrieves one or more Registry preference items under either Computer Configuration or User Configuration in a GPO.

8

Get-GPRegistryValue

Retrieves one or more registry-based policy settings under either Computer Configuration or User Configuration in a GPO.

9

Get-GPResultantSetOfPolicy

Outputs the Resultant Set of Policy (RSoP) information for a user, a computer, or both to a file.

10

Get-GPStarterGPO

Gets one Starter GPO or all Starter GPOs in a domain.

11

Import-GPO

Imports the Group Policy settings from a backed-up GPO into a specified GPO.

12

Invoke-GPUpdate

Schedule a remote Group Policy refresh (gpupdate) on the specified computer.

13

New-GPLink

Links a GPO to a site, domain, or organizational unit (OU).

14

New-GPO

Creates a new GPO.

15

New-GPStarterGPO

Creates a new Starter GPO.

16

Remove-GPLink

Removes a GPO link from a site, domain or OU.

17

Remove-GPO

Deletes a GPO.

18

Remove-GPPrefRegistryValue

Removes one or more Registry preference items from either Computer Configuration or User Configuration in a GPO.

19

Remove-GPRegistryValue

Removes one or more registry-based policy settings from either Computer Configuration or User Configuration in a GPO.

20

Rename-GPO

Assigns a new display name to a GPO.

21

Restore-GPO

Restores one GPO or all GPOs in a domain from one or more GPO backup files.

22

Set-GPInheritance

Blocks or unblocks inheritance for a specified domain or organizational unit (OU).

23

Set-GPLink

Sets the properties of the specified GPO link.

24

Set-GPPermission

Grants a level of permissions to a security principal for one GPO or all the GPOs in a domain.

Modifies the following permissions: 

  • Security Filtering (who the policy applies to)
  • Delegation (Who can edit, read, delete, or modify security) 

25

Set-GPPrefRegistryValue

Configures a Registry preference item under either Computer Configuration or User Configuration in a GPO.

26

Set-GPRegistryValue

Configures one or more registry-based policy settings under either Computer Configuration or User Configuration in a GPO.

27

gpfixup

Fix domain name dependencies in Group Policy Objects and Group Policy links after a domain rename operation. 

 

 

28

dcgpofix

 

What are the switches? 

Recreates the default Group Policy Objects (GPOs) for a domain

 

  • /ignoreschema
    • Ignores the version of the Active Directory® schema when you run this command. Otherwise, the command only works on the same schema version as the Windows version in which the command was shipped.
  • /target

29

 

  1. How do you recreate the Default Domain Policy GPO?
  2. How do you recreate the Default Domain Controller Policy GPO?

  1. dcgpofix /target:Domain
  2. dcgpofix /target:DC

30

gpresult

Displays the Resultant Set of Policy (RSoP) information for a remote user and computer. 

 

/s Specifies the name or IP address of a remote computer. Do not use backslashes. The default is the local computer. /u Uses the credentials of the specified user to run the command. The default user is the user who is logged on to the computer that issues the command. /p [] Specifies the password of the user account that is provided in the /u parameter. If /p is omitted, gpresult prompts for the password. /p cannot be used with /x or /h. /user [\] Specifies the remote user whose RSoP data is to be displayed. /scope {user | computer} Displays RSoP data for either the user or the computer. If /scope is omitted, gpresult displays RSoP data for both the user and the computer. [/x | /h] Saves the report in either XML (/x) or HTML (/h) format at the location and with the file name that is specified by the FILENAME parameter. Cannot be used with /u, /p, /r, /v, or /z. /f forces gpresult to overwrite the file name that is specified in the /x or /h option. /r Displays RSoP summary data. /v Displays verbose policy information. This includes detailed settings that were applied with a precedence of 1. /z Displays all available information about Group Policy. This includes detailed settings that were applied with a precedence of 1 and higher. /? Displays help at the command prompt.

31

gpupdate

Updates Group Policy settings

32

gpupdate /force

Reapplies all policy settings. By default, only policy settings that have changed are applied.

33

gpresult /v

Displays verbose policy information. This includes detailed settings that were applied with a precedence of 1.

34

gpresult /z

Displays all available information about Group Policy. This includes detailed settings that were applied with a precedence of 1 and higher.

35

gpresult /v > filename.txt

outputs all information to a text file

36

gpresult [/x or /h]

Saves the report in either XML (/x) or HTML (/h) format at the location and with the file name that is specified by the FILENAME parameter. Cannot be used with /u, /p, /r, /v, or /z.

37

What is the order in which group policy applies?

L - Local 

S - Site 

D - Domain 

OU - Organizational Unit

38

When you have multiple GPOs linked in the same location, how do policies apply?

The are applied via Link Order (Precendence). Highest applies first. Lowest is applied last 

39

Where would you set permissions to let a user link Group Policy objects?

In the Domain Delegation

40

What does enforcing a policy do? 

Changes it ti be the last policy applied and is not blcoked from enheritance

41

How would you give someone the rights to create Group Policy objects?

Add them to the AD Group Group Policy Creator/Owners