Lab A: Implementing Group Policy Answer Key

Exercise 1 Creating and Configuring GPOs

In this exercise, you will create a corporate GPO and the organizational unit structure for the Accounting department. You will also create and configure GPOs for the Accounts Receivable and Accounts Payable groups. Task 1

! Create the three organizational units

1. Log on as Nwtradersx\ComputerNameUser (where ComputerName is the name of the computer you are working on) with a password of P@ssw0rd if you are not already logged on. 2. Click Start, point to Administrative Tools, right-click Active Directory Users and Computers, and then click Run as. 3. In the Run As dialog box, click The following user, type YourDomain\Administrator as the user name with a password of P@ssw0rd and then click OK. 4. Browse to your domain, right-click the domain name, click New, and then click Organizational Unit. 5. Type Accounting as the organizational unit name, and then click OK. 6. Repeat these steps to create the Accounts Payable and Accounts Receivable organizational units within the Accounting organizational unit.

Task 2

! Create the Accounting GPO and ensure that key settings are
propagated to all users in Accounting 1. Click Start, point to Administrative Tools, right-click Group Policy Management, and then click Run as. 2. In the Run As dialog box, click The following user, type YourDomain\Administrator as the user name with a password of P@ssw0rd and then click OK. 3. In Group Policy Management, expand your forest, expand Domains, expand YourDomain, expand and right-click Group Policy Objects, and then click New. 4. Type Accounting and then click OK. 5. Right-click the Accounting GPO, and then click Edit. 6. In Group Policy Object Editor, under User Configuration, expand Administrative Templates, and then click Start Menu and Taskbar.

Lab A: Implementing Group Policy Answer Key

7. In the details pane, double-click Remove Run menu from Start Menu, click Enabled, and then click OK. 8. In the details pane, double-click Remove and prevent access to the Shut Down command, click Enabled, and then click OK. 9. Close Group Policy Object Editor. 10. Click and right-click the Accounting organizational unit, click Link an existing GPO, select Accounting from the list, and then click OK. 11. In the details pane, right-click Accounting from the list of GPOs, click Enforced, and then click OK. Task 3

! Copy the Accounting GPO and rename it Accounts Receivable

1. Under Group Policy Objects, right-click Accounting, and then click Copy. 2. Right-click Group Policy Objects, and then click Paste. 3. Click OK to use the default permissions. 4. Click OK after the copy progress is completed. 5. Right-click Copy of Accounting, click Rename, type Accounts Receivable and then press ENTER.

Task 4

! Configure the Accounts Receivable GPO

1. Right-click Accounts Receivable, and then click Edit. 2. In Group Policy Object Editor, under User Configuration, expand Administrative Templates, expand Control Panel, and then click Add or Remove Programs. 3. In the details pane, double-click Remove Add or Remove Programs, click Enabled, and then click OK. 4. Close Group Policy Object Editor.

Task 5

! Copy the Accounting GPO and rename it Accounts Payable

1. Under Group Policy Objects, right-click Accounting, and then click Copy. 2. Right-click Group Policy Objects, and then click Paste. 3. Click OK to use the default permissions. 4. Click OK after the copy process is completed. 5. Right-click Copy of Accounting, click Rename, type Accounts Payable as the GPO name, and then press ENTER.

Task 6

! Configure the Accounts Payable GPO

1. Right-click Accounts Payable, and then click Edit. 2. In Group Policy Object Editor, under User Configuration, expand Administrative Templates, expand System, and then click Ctrl+Alt+Del Options. 3. In the details pane, double-click Remove Lock Computer, click Enabled, and then click OK. 4. Close Group Policy Object Editor.

Lab A: Implementing Group Policy Answer Key

Exercise 2 Linking GPOs

In this exercise, you will link GPOs to the appropriate part of the organization. Task 1

! Link the Accounts Receivable and the Accounts Payable GPOs to the
appropriate organizational unit 1. In Group Policy Management, browse to the Accounts Receivable and Accounts Payable organizational units. 2. Right-click each organizational unit in turn, click Link an Existing GPO, select the appropriate GPO from the list, and then click OK.

Lab A: Implementing Group Policy Answer Key

Exercise 3 Verifying Group Policy Settings

In this exercise, you will use the Group Policy Modeling Wizard to verify the GPO settings that you configured in the previous exercises. Task 1

! Use the Group Policy Modeling Wizard to verify the Accounting GPOs
1. In Group Policy Management, right-click Group Policy Modeling, and then click Group Policy Modeling Wizard. 2. On the Welcome to the Group Policy Modeling Wizard page, click Next. 3. On the Domain Controller Selection page, click Next. 4. On the User and Computer Selection page, click Browse for the User information, expand your domain, expand and click Accounting, and then click OK. 5. On the User and computer Selection page, click Browse in the Computer information section, expand your domain, click Accounting, click OK, and then click Next. 6. On each of the following pages, click Next. 7. On the Completing the Group Policy Modeling Wizard page, click Finish. 8. Repeat the above steps for the Accounts Payable and the Accounts Receivable organizational units.

Task 2

! Review the Group Policy Modeling Wizard results to verify the GPO
settings 1. Right-click the modeling results from one of the three queries that you created, and then click Advanced View. 2. Under Resultant Set of Policy, review the settings for accuracy. 3. Close Resultant Set of Policy, and then close Group Policy Management.