123ArticleOnline Logo
Welcome to 123ArticleOnline.com!
ALL >> System-Network-Administration >> View Article

Filtering Gpo Scope With Security Groups

Profile Picture
By Author: Jasmine
Total Articles: 286
Comment this article
Facebook ShareTwitter ShareGoogle+ ShareTwitter Share

As discussed in Lesson 1, the policies in a GPO apply only to CompTIA A+ Essentials users who have the Read and Apply Group Policy permissions for the GPO set to Allow. However, by default, all users in the Authenticated Users group have Read and Apply Group Policy permissions set to Allow for all new GPOs. This means that by default, all users are affected by the GPOs set for their domain, site, or OU regardless of the other groups in which they might be members. Therefore, there are two ways of filtering GPO scope:
Clear the Apply Group Policy permission (currently set to Allow) for the Authenticated Users group, but do not set this permission to Deny. Then determine the groups to which the GPO should be applied and set the Read and Apply Group Policy permissions for these groups to Allow.
Determine the groups to which the GPO should not be applied and set the Apply Group Policy permission for these groups to Deny.
Recall from Chapter 9, "Administering Active Directory Objects," that if you deny permission to a user to gain access to an object, the user will not ...
... have that permission, even if you allow the permission for a group of which the user is a member.
To filter the scope of a GPO, complete the following steps:
1.Access the Group Policy Object Editor for the GPO.
Right-click the root node, and then click Properties.In the Properties dialog box for the GPO, click the Security tab, shown previously in Figure 10-14, and then click the security group through which to filter this GPO.
If you need to change the list of security groups through which to filter this GPO,you can add or remove security groups using Add and Remove.
4.Set the permissions as shown in A+ Exams, and then click OK.
To specify the No Override option, complete the following steps:
1.Open the Active Directory Users And Computers console to specify the No Override option for a domain or OU, or open the Active Directory Sites And Services
console to specify the No Override option for a site.
2.In the console, right-click the site, domain, or OU to which the GPO is linked,click Properties, and then click the Group Policy tab.
3.In the Properties dialog box for the object, in the Group Policy tab, select the GPO, and then click Options.
In the Options dialog box for the GPO, shown in Figure 10-18, select the No Override check box to specify that other GPOs should be prevented from overriding
settings in this GPO, and then click OK.
The east.humongous.com administrator, Sharon Salavaria, has configured a GPO, named Required_Set, that she says is mandatory for her entire domain. She also has several GPOs that she's configured at the domain, but she doesn't consider those policies mandatory. The Administration and Regional Sales OU administra?tors have blocked policy inheritance to their OUs. Sharon wants to be sure that they receive at least the Required_Set GPO. What should she clo?
Sharon should configure the Required_Set GPO for No Override. The Required Set MCSE exams will be inherited by all the OUs, but the administrators of those OUs will not have to accept the other GPOs she has configured.

Total Views: 304Word Count: 524See All articles From Author

Add Comment

System/Network Administration Articles

1. Fiber Cable Cutting Machine: Precision And Efficiency In Fiber Optic Processing
Author: Ryan

2. Evolution Of Ethernet And Fiber Optic Termination: A Look At Sc Vs. Lc Connectors
Author: Ryan

3. Understanding Mpo Cables: Essential Guide To Fiber Optic Connectivity
Author: Ryan

4. Oracle Erp Cloud Consulting Company - Rite
Author: Rite

5. Is On Grid Solar The Smartest Way To Cut Your Electricity Bills?
Author: Seo Globo

6. Understanding Boc Package Substrate: Revolutionizing Semiconductor Technology
Author: Ryan

7. Revolutionizing Connectivity: The Benefits And Applications Of Flexible Printed Circuits
Author: Ryan

8. A Comprehensive Guide To Al₂o₃ (alumina) Pcb
Author: Ryan

9. Your Information May Already Be On The Dark Web
Author: Reinfosec

10. Fbt Optical Fiber Splitter Vs. Plc Optical Fiber Splitter
Author: Ryan

11. Know More About The Optical Fiber Alignment System
Author: Ryan

12. Fiber Optic Pigtail: What Is It And What Are Its Types?
Author: Ryan

13. Comprehensive Introduction Of Fiber Optic Splitter
Author: Ryan

14. Know About The Fiber Polishing Parameters
Author: Ryan

15. Basic Introduction To Ic Substrate China
Author: Ryan

Login To Account
Login Email:
Password:
Forgot Password?
New User?
Sign Up Newsletter
Email Address: