Applications of Group Policy

Can any smart person there solve this question for me? Thanks..


"You are the administrator of your company’s network. The network consists of 1 Windows 2000 domain. The domain consists of 4 OU (Organisation Unit) as shown. All OUs contain users for their department. The Network Administrators are in the IT OU. You want to centralize security policy for your domain. You create the following 3 Group Policies. How should you apply the Group Policy?


    -Main OU
          -IT OU
          -HR OU
          -Sales OU
          -Finance OU


I.      Group Policy 1 defines Password, Audit and User Rights policies
II.      Group Policy 2 defines User Desktop policy
III.      Group Policy 3 defines a high security User Desktop policy for network administrators."



Anyone Can Give Me the DETAILS STEPS to solve the above question and the 800 Points will be yours!!!
THANKS IN ADVANCE........ =)
pika83Asked:
Who is Participating?
 
DanniFConnect With a Mentor Commented:
Hmmmm I hope this isn't your homework :).

I. You should apply this policy on Domain level as this should affect ALL users. (password and security policy)

II. This one goes to the 3 user OU's (HR, Sales and Finance).

III. This one goes to the IT OU as this is only for network administrators.

Hope this helps and good luck,

Daniel F.
0
 
Joseph_MooreCommented:
Actually, I would put Group Policy 1 on Main OU, since GP is inherited by all child OUs (unless the inheritance is denied). That way, all OUs would get GP1, and you don't need to mess with the Domain-level GP.
Other then that, I agree with DanniF on GP2 and GP3.
0
 
IsigowCommented:
Actually, just put Group Policy I and II on the Domain level (Main OU)
Then put GPIII on the IT OU.
Inheritance level will override the Previous User Desktop created via GPII when you are in the IT OU, thus allowing only GPIII to affect users in the IT OU, but letting GPII still affect users in the other OU's

Isi
0
Worried about phishing attacks?

90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!

 
Antowh76Commented:
-Password policies must be set at domain level to take effect, so
I. must be applied at domain level

II. and III, I agree with Isigow.

Regards, Antonio
0
 
IsigowCommented:
yeah I think I said that :)

Isi
0
 
DanniFCommented:
But why would you want to be:

A) Setting Domain level policies when you don't need to ?

B) Having policies override each other when you don't need to ??

I'd rather do it this way than counting on the fact that the policies override each other correctly.


In fact, If this was MY domain I would create an OU called Users where I would place all normal user OU's (HR, Sales and Finance in this case) and then I would place the IT OU outside the Users OU as I have completely different policies for the two.

So mine would be like this:

   
-DOMAIN-
     -IT OU
     -Users OU
           -HR OU
           -Sales OU
           -Finance OU

Anyways, I don't think you can do this as you have a question you need to answer. Just running off a bit there :)

Good luck,

Daniel F.
0
 
pika83Author Commented:

Hey guys..

Thanks a million! Really appreciate it ;)


Take care =)
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.