[ Pobierz całość w formacie PDF ]
.This is not very useful for managingcomputers on a network.Local Group Policy is configured on the localcomputer.Site Group Policy Site Group Policy is when the Group Policy objectis linked to the site.Site Group Policies can generate unwanted networktraffic, so use these only when absolutely necessary.Domain Group Policy Domain Group Policy is when the GroupPolicy object is linked to the domain.This will apply the Group Policyobject to all computers and users within a domain.This is especiallyuseful for enforcing company-wide settings.This is one of the two mostcommonly used applications of Group Policy.Organizational Unit Group Policy When the Group Policy objectis linked to the organizational unit (OU).Organizational unit GroupPolicy is especially useful for applying a Group Policy object to a logicalgrouping (organizational unit) of users or computersWhen an XP client logs onto a Windows 2000 AD, any legacy Windows2000 Group Policies will be applied to and work on Windows XP.The new Windows XP Group Policy snap-in will work on a Windows 2000AD.You can use the Windows XP Group Policy snap-in to connect to anyGroup Policy object in the Active Directory.You can also create a new GroupPolicy object using this snap-in.When you connect to a GPO using this snap-in,the ADM files are automatically updated using the newer versions of these filesfound on Windows XP.Windows XP has over 200 new policies.These policies are reflected in thenew ADM files that are updated on the domain.The Windows XP admin snap-inshows what policies work on which clients.The Windows 2000 snap-in does notdisplay this information.Best practice in a mixed environment: Use the Windowswww.syngress.com 189_XP_12.qxd 11/12/01 11:09 AM Page 592592 Chapter 12 " Using IntelliMirror TechnologiesXP Group Policy snap-in to administer Group Policy because it will display whatpolicies are supported on what clients.Group Policy OrderWhen Group Policies are applied in Windows XP, they are applied in a specificorder.This is important to note because the order applied can affect the resultingpolicy.Group Policy is applied in the following order:Windows NT 4 Policies (if any exist)Windows 2000 PoliciesLocal Group PoliciesSite Group PoliciesDomain Group PoliciesOrganizational Group Policy Objects (going from Highest Parent in thechain to lowest)Additionally, the result of all of the applied policies can be determined by usingthe Resultant Set of Policy (RSOP) snap-in.More information on this topic iscovered later in the  Resultant Set of Policy (RSOP) section.Figure 12.1 showshow Group Policy is applied by different organizational units along with thedomain Group Policy.Amy gets the Group Policy for the domain and OUa.Matt gets the GroupPolicy for the domain and OU2.Brian gets the Group Policy for the domain andOU2 and OUc.Group Policy ScenarioA real-world example of using group policies is covered in the following sce-nario:At Haverford Consultants, we have been tasked with a way to centralizebackups and increase fault tolerance.Company policy is for users to store allapplication data in the My Documents folder.If a user works on more than onecomputer, the user s My Documents folder should be available on all of the com-puters connected to the network.Additionally, this Group Policy will make clienthardware replacement simpler, because all user data is stored on the server.www.syngress.com 189_XP_12.qxd 11/12/01 11:09 AM Page 593Using IntelliMirror Technologies " Chapter 12 593Figure 12.1 Group Policy ApplicationsDomain.comOUa Group PolicyOU1Amy receivesDomain Group Policyand OUa Group PolicyDOMAIN Group PolicyOUaAmyMatt receivesOU2Domain Group Policyand OU2 Group PolicyMattOUbOU2 Group PolicyBrian receivesDomain Group Policyand OU2 Group Policyand OUc Group PolicyOUcBrianOUc Group PolicyNOTEFor more information on integrating Windows XP with Active Directory,please consult the Microsoft whitepaper,  Managing Windows XP in aWindows 2000 Server Environment. You can find the whitepaper atwww.microsoft.com/windowsxp/pro/techinfo/administration/policy/default.asp.The approach we are using to solve this problem is to redirect the user s MyDocuments folder to a shared folder on a server.In order to work with thedomain Group Policy object, best practice on a Windows XP machine is to usethe Windows XP Group Policy template.This will allow you greater control overthe installation on Windows XP machines.You can easily do this by creating aGroup Policy object [ Pobierz całość w formacie PDF ]
  • zanotowane.pl
  • doc.pisz.pl
  • pdf.pisz.pl
  • agnieszka90.opx.pl