Resultant Set Of Policy (rsop)

By Author: Mike Jones
Total Articles: 256
Comment this article

Because an object can be affected by multiple levels of sy0-201 security, Group Policy inheritance, and exceptions, it's often difficult to determine just what policies apply. Resultant Set of Policy (RSoP) is a new tool in Windo'ws Server 2003 that helps you anticipate and troubleshoot Group Policy settings. RSoP polls existing and planned policies and reports the results of those queries, listing the final set of applied policies and policy precedence for an object you specify. RSoP can help you manage and troubleshoot conflicting policies. For detailed information on using RSoP, refer to Chapter 11, "Administering Group Policy."
There are two types of Group Policy settings: computer configuration settings and user configuration settings. Computer configuration settings are used to set group policies applied to computers, regardless of who logs on to them, and are applied when the operating system initializes. User configuration settings are used to set group policies applied to users, regardless of which computer the user logs on to,and are applied when users log on ...
... to the computer.
Group Policy is applied to Active Directory components in the following order:local computer, site, domain, and then OU.
Group Policy is passed down from parent to child Security+ exam containers within a domain. If you have assigned a separate Group Policy setting to a parent container, that
Group Policy setting applies to all containers beneath the parent container, including the user and computer objects in the container. However, if you specify a Group Policy setting for a child container, the child container's Group Policy setting overrides the setting inherited from the parent container.
The default order for the application of Group Policy settings is subject to the following exceptions: No Override, Block Policy Inheritance, the Loopback setting,and a computer that is a member of a workgroup.
Group Policy Planning Strategies
There are three parts to planning Group Policy:
Plan the Group Policy settings necessary for computers and users at each level (sites, domains, and OUs).
Plan the GPOs necessary for computers and users at each level (sites, domains,and OUs).
Plan administrative control of GPOs.
Document your Group Policy plans. Accurate and organized documentation of the Group Policy settings and GPOs needed by your organization and the administrators who control the GPOs can help when you need to revisit free certification or modify your Group Policy configuration.