0%

0/1 Lessons

Course Introduction

• 2min

0 / 1 lessons complete

Introduction to Group Policy Management

• 1hr 24min

0 / 6 lessons complete

Manage Your Workstations

• 1hr 46min

0 / 7 lessons complete

Securing Your Domain

• 1hr 1min

0 / 5 lessons complete

Group Policy Troubleshooting

• 53min

0 / 5 lessons complete

Course Conclusion

• 1min

0 / 1 lessons complete

Instructions

Q&A (0)

Notes (0)

Resources (0)

Saving Progress...

Resources

There are no resources for this lesson.

Notes can be saved and accessed anywhere in the course. They also double as bookmarks so you can quickly review important lesson material.

Create note

In this lecture, we will create a GPO that will configure our desktop background for all our Domain Users. This is not a Computer configuration, it is a User Configuration. So, when we want to link the OU we will do it to an OU that contains User accounts or you can link it to the root of the Domain and will apply all Users inside the domain.

Steps 1 - Create a File Share

  1. Right-click on Windows Explorer under the E:\ drive and choose to create a New > Folder.
  1. Name the folder Desktop Backgrounds and add the instructorpaul.com.jpg image inside it.
  2. Share the folder by right-clicking it and selecting Properties.
  3. Under the Desktop Background Properties Window select the Sharing Tab and click on the Advanced Sharing button.
  1. Click on the Share this folder checkbox and then click on the Permissions button.
  1. By default, Everyone has Read permissions. To be a little bit more secure let’s delete the group by highlighting Everyone group and clicking on the Remove button.
  1. Now let’s click on Add to add our Authenticated Users. 
  1. Type in the Authenticated Users name and click on the Check Names button to resolve the name. If it is underlined it should be fine and click the OK button.
  1. Make sure Authenticated Users have Read Permissions and click on Apply and OK buttons.
  1. Now at the last window, we can see the network path. Click Close.
  1. Now we are going to test the network path login from member server IPMS01 and we are attempting to access the file share.
  2. Open File Explorer and type in the address bar \\IPDC01\Desktop Backgrounds. We can see it is accessible for a domain user account and the desktop background image. Double click the file to make sure we can open it.
  1. Now let’s go to the Domain Controller to configure the policy. 

Step 2 - Configure the Group Policy Object

  1. Open Server Manager  > Tools >  Group Policy Management. Now we need to choose where to link the policy.
  2. Right-click instructorpaul.com and choose to Create a GPO in this domain, and Link it here...
  1. Let’s call the GPO Desktop Background and click OK.
  1. Right-click the newly created Desktop Background policy and choose Edit.
  1. Under User Configuration navigate to Policies > Administrative Templates > Desktop > Desktop. Double click on Desktop Wallpaper to edit the setting.
  1. Click on the Enabled radio button and enter the UNC path of the Wallpaper and select Center and click OK.
  1. Open a command prompt and type gpupdate /force.
  1. We can also type gpresult /r to see if the group policy has been applied.

Step 3 - Testing

  1. Log out and log back into the computer or server and you will see the Desktop Background wallpaper

That is how you deploy a desktop background with Group Policy.

5 1 vote
Lesson Rating
Subscribe
Notify of
profile avatar
10 Comments
Oldest
Newest Most Voted
Inline Feedbacks
View all comments

profile avatar
dustenm(@dustenm)
Member
1 year ago

I did these steps exactly in the itlab but it keeps saying otherwise… I verified and the new backround was indeed applied to other workstation. What is going on here????!!!!!!! Very frustrated

profile avatar
Ricardo P(@ricardop)
Admin
Reply to  dustenm
1 year ago

Hi profile avatar Dusten Maxwell

I was checking the lab and it happened to me that the name of the GPO was not the same. The title should be “Desktop Backgrounds”. After fixing the name and having the shared folder ‘E:\Desktop Backgrounds’.

Something else I experienced was that the member server was authenticated with the local administrator, not the domain administrator. Additionally, the user Paul Hill can log in on three to test.

profile avatar
kenedy.ejacha(@kenedye)
Member
1 year ago

I am not able to create a GPO when I go to Group Policy Management. Please is there a problem with this lab?
Thanks

profile avatar
Ricardo P(@ricardop)
Admin
Reply to  kenedy.ejacha
1 year ago

Hi profile avatar Kenedy Ejacha

Do you get any error messages or what seems to be the problem that you cannot create the GPO? I did check the lab and the domain controller, you should be able to.

Ricardo

profile avatar
tyneshiam(@tyneshiam)
Member
9 months ago

Hello. It’s curious, I can deploy the background to the main domain but I can’t seem to get the background to deploy on the workstation. It says I’ve configured it correctly but I would really like to test it in the other environments. Please tell me what I am doing incorrectly. Thank you!

profile avatar
Ricardo P(@ricardop)
Admin
Reply to  tyneshiam
9 months ago

Hi profile avatar Tyneshia Mack

If you see it on the domain then you did it right. Try login in with a user account to the workstation and make sure is joined to the domain. Sometimes it happens that a reboot or gpupdate is needed for the policy to kick in.

Ricardo

profile avatar
nitikan(@nitikan)
1 month ago

what should I do, if I am getting an error message saying GPO isn’t applying: Access denied (Security filtering)?

Capture
profile avatar
Ricardo P(@ricardop)
Admin
Reply to  nitikan
1 month ago

Hi profile avatar NITIKA NITIKA

It seems like if the policy is not applying due to permissions of some sort. Verify that the ‘Authenticated Users’ group has at least ‘Read’ permission on the share folder as well.

Ricardo

profile avatar
chkontog(@charalamposk)
Member
1 month ago

Where is the object “Administrative Users”?

profile avatar
Ricardo P(@ricardop)
Admin
Reply to  chkontog
1 month ago

Hi profile avatar Chkontog

There’s no “Administrative Users” object. The term refers to the users that are administrators or part of the administrator group.

Ricardo