You need to sign up to get access!

Sign up to get full access to this course.

Sign up to access this lesson

Click here to sign up and get access to this lesson!

Saving Progress...

In this lecture, we are going to edit the settings or the configuration of Group Policy Objects.

Open Group Policy Management Console window.

Let's edit Test GPO 3 that we created earlier:

Steps:

  1. Let's go ahead and Right Click on the GPO and hit Edit...
Graphical user interface, applicationDescription automatically generated
  1. Here we have both Computer and User Configuration. The left-hand side is the navigation pane, the right-hand side is the content.
Graphical user interface, text, application, emailDescription automatically generated

Now, you might be wondering how do you know if you are going to use a Computer or User configuration, and the answer depends on what you are linking the GPO to.

  1. Let's say if we link this to an OU that only uses Computers, we would use Computers Configuration, this depends on the objects in use. Therefore if there are only computers, then only computer changes will take effect. On the other hand, if we have an OU with both users and computers, we can make changes to either and they would apply based on the type.
  2. Inside of these windows, we have Policies and Preferences, or both.

Most of the settings are the same, but not every single one. These are based on Object Types for example Folder Redirection, this is a User-based configuration and not a Computer-based configuration.

  1. For example, under Control Panel Settings we can set up Printers, and set Power Options. These work on both and are very similar. Let's take a look at Power Options:
Graphical user interface, application, WordDescription automatically generated

Select Power Options. In the right window click New.

Graphical user interface, applicationDescription automatically generated
  1. Now we can set a power plan, and these same options can be done on a user basis. For example, admins never sleep, but if we want certain laptops to sleep, we would make a user and a computer policy.
  1. Let's configure one setting as an example. Under Computer Configuration > Policies > Windows Settings > Security Settings > Event log.
Graphical user interface, text, applicationDescription automatically generated

Let's say we wanted to prevent Guests accounts from accessing the Application log :

Graphical user interface, text, application, emailDescription automatically generated

The Prevent local guests group from accessing the application log policy is currently undefined. Right-click and select Properties, and then see the settings. We can then define this, for example, let's select Disabled:

Graphical user interface, text, application, emailDescription automatically generated

As we can see it is Disabled now and our policy now shows Disabled. The same goes for Enabled.

TableDescription automatically generated with medium confidence
  1. Now if we minimize the window and click on the GPO Test 3 and click on the Settings tab now we have data. We can see the option we just have configured.
Graphical user interface, text, application, emailDescription automatically generated

That is how you edit settings in GPO. There are tons of settings you can choose from. A quick search in a google search engine will show walkthroughs on settings you want to configure.

Sign up to access the rest of this lesson

You must either log in or sign up to access this lesson.

CURRICULUM

Course Introduction

• 1min

0 / 1 lessons complete

Introduction to Group Policy Management

• 1hr 24min

0 / 6 lessons complete

Manage Your Workstations

• 1hr 46min

0 / 7 lessons complete

Securing Your Domain

• 54min

0 / 5 lessons complete

Group Policy Troubleshooting

• 53min

0 / 5 lessons complete

Course Conclusion

• 1min

0 / 1 lessons complete