Implementing Group Policy

By Author: fiona
Total Articles: 191
Comment this article

To experience this issue, complete the following steps:
1.Log on to Serverl using the domain mcse training administrator name and password.
2.In the contoso.com domain container,create two users:GPLabUserl andGPLabUser2.
3.In the contoso.com domain container, create a new OU in contoso.com named GPLab.
4.In the GPLab OLI, create two universal groups: GPLabGroupl and GPLabGroup2.
5.In the GPLab OU, create two users: GPLabUser3, and GPLabUserO.
6.Add GPLabUserl, GPLabUser2, GPLabUser3, and GPLabUserO as members of the Server Operators group. This allows these accounts to log on locally.
7.Add GPLabUserl as a member of the GPLabGroupl group.
8.Acid GPLabLJser2 as a member of the GPLabGroup2 group.
9- Add GPLabUser3 as a member of both GPLabGroupl and GPLabGroup2.GPLabUserO was added to only the Server Operators group. By default, all new users are also members of Domain Users.
10.Create a new GPO for the GPLab OU. To do so, right-click GPLab and then clickmcse 2003 certification Properties.
...
... 11.In the GPLab Properties dialog box, click the Group Policy tab. Click New. Type GPLabRemoveRun as the new policy name, and press Enter. Click Properties.
12.In the GPLabRemoveRun Properties dialog box, click the Security tab. Click Acid.
13.Type GPLabGroupl and click OK. You should see the GPLabGroupl appear in the Group Or User Names window.
14.Look at the Permissions For GPLabGroupl window. Notice that GPLabGroupl has Read permissions (the Allow box is checked) for this GPO. Check the Allow box
that corresponds to the Apply Group Policy entry in this list. Click Apply.
15.Click Add again. This time type GPLabGroup2 and click OK. The GPLabGroup2 appears in the Group Or User Names window.
16.In the Permissions For GPLabGroup2 window, check the Deny box that corresponds to the Apply Group Policy entry, and then click OK. The Security warning
message box appears. Read the warning, and then click Yes.
You've now configured the GPLabRemoveRun GPO so members of GPLabGroupl can apply the policy but members of GPLabGroup2 cannot.
17.In the GPLab Properties dialog box, click Edit. The Group Policy Object Editor window opens.
18.Navigate to the following policy location: User Configuration, Administrative Templates, Start Menu And Taskbar.
19.Double-click the Remove Run Menu From Start Menu setting in the details pane.
20.In the Remove Run Menu From Start Menu Properties dialog box, click Enabled, and then click OK. You've now enabled this setting, which removes the Run
option from the Start menu of all affected users.
21.Close all open windows.
22.Click Start, click Run, type gpupdate, and then press Enter. This ensures that the policy is immediately applied to the system.
23.Log off as Administrator. Log on as GPLabUserl. Click Start Free A+ exam questions. Do you see the Run option in the Start menu?Yes, because the policy doesn't apply to this user.
24.Log off GPLabUserl and log on as GPLabUser2. Do you see the Run option in the Start menu?Yes, because the policy doesn't apply to this user.
25.Log off GPLabUser2 and log on as GPLabUser3. Do you see the Run option in the Start menu?Yes, because the policy doesn't apply to this user.
26. Log off GPLabUser3 and log on as GPLabUserO. Do you see the Run option in the Start menu?No, because the policy applies to this user.