| Exercise 1: Creating
GPOs.
Group Policy Objects can be created at different levels (site, domain,
OU). Create a GPO at your domain level (e.g. region1.contoso.com). Name
it GPOLastName (where LastName is your last name). Then, answer the following
questions:
1) Which of the following utilities is used to create group policy objects
for an OU?
a) Active Directory Sites and Services
b) Active Directory Domains and Trusts
c) Active Directory Users and Computers
d) Active Directory Users and Organizational Units
e) Group Policy editor
2) Which of the following utilities are used to create a GPO
and to set specific policies that should apply at the
site level?
a) Active Directory Users and Computers
b) Active Directory Domains and Trusts
c) Active Directory Sites and Services
d) Group Policy editor
3) Suppose that, in a domain, two administrators create a GPO at the
same time using the same name to name the GPO. Which of the following
statement(s) is/are true?
a) One of the GPOs will automatically be renamed by Windows 2000 Server.
b) A GUID will be assigned by Windows 2000 to one of the GPOs
c) Windows 2003 Server will allow the creation of the two GPOs
but different GUIDs will be assigned to them.
d) One of the GPOs will be removed by Windows 2000 Server from the Active
Directory
e) None of the above
Exercise 2: Publishing an application to users using group policy.
No questions about this aspect on the final exam.
Exercise 3: Assigning an application to users using group policy.
No questions about this aspect on the final exam.
Exercise 4: Modifying a GPO
to specify User configuration settings
1) When do you think the policies
you just specified are going to apply?
a) As soon as you finish modifying
the GPO
b) As soon as you log off as Administrator
c) When a user from your OU (YourLastNameOU) logs on to your domain
d) When a user from your domain logs on to the domain.
Note: The GPO is this case is associated to YourLastNameOU
using the User Configuration node. It applies when a user for the YourLastNameOU
logs on to your domain (slide 12 or your W2K textbook).
Exercise 5: Modifying a GPO to specify Computer security
settings
2) Suppose that other GPOs are assigned at the domain level. If there
is a conflict between the GPOs assigned at the domain level and the settings
in the Domain Policy xx GPO (which is linked to the Domain Controller container), what settings will be applied?
a) The settings assigned at
the domain level
b) The settings assigned in the Domain Policy xx GPO
c) None of the above
Explanation: In this case the GPO called Domain Policy
xx is set in the Domain Controller container which is a child object compared
to the domain. So the settings assigned in the Domain Policy xx GPO will
be applied because if GPOs are assigned to both the parent and the child containers
and that there is a conflict, the child container settings apply.
3) Suppose that other GPOs
are assigned at the domain level. If there is no conflict between the
GPOs assigned at the domain level and the settings in the Domain Policy
xx GPO, what settings will be applied?
a) The settings assigned at
the domain level
b) The settings assigned in the Domain Policy xx GPO
c) All of the above
Explanation:
In this case the policies set at the domain level and the policies set in the Domain Policy xx GPO will both apply
because if If policies are set at both the parent and the child level
and there is no conflict, both both settings apply.
|