PMBOOK Guide
Administering Group Policy with Group Policy Management Console
By Jim Lundy
Microsoft Corporation
Published: April 2003
Abstract
In conjunction with Windows Server 2003, Microsoft has released a new Group Policy management solution that unifies management of Group Policy. Microsoft Group Policy Management Console (GPMC) provides a single solution formanaging all Group Policy-related tasks. GPMC lets administrators manage Group Policy for multiple domains and sites within one or more forests, in a simplified user interface (UI) with drag-and-drop support. Highlights include new functionality such as backup, restore, import, copy, and reporting of Group Policy objects (GPOs). These operations are fully scriptable, which lets administratorscustomize and automate management. Together these advantages make Group Policy much easier to use and help you manage your enterprise more cost-effectively.
The information contained in this document represents the current view of Microsoft Corporation on the issues discussed as of the date of publication. Because Microsoft must respond to changingmarket conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information presented after the date of publication.
This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, AS TO THE INFORMATION IN THIS DOCUMENT.Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of MicrosoftCorporation.
Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectualproperty.
The example companies, organizations, products, people and events depicted herein are fictitious. No association with any real company, organization, product, person or event is intended or should be inferred.
© 2003. Microsoft Corporation. All rights reserved.
Microsoft, Active Directory,and Windows are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.
The names of actual companies and products mentioned herein may be the trademarks of their respective owners.
Contents
Introduction 1
GPMC System Requirements 1
Installing GPMC 2
Group Policy ManagementConsole Overview 3
Managing Multiple Forests 5
Domain Controllers in GPMC 6
Domain Contents Overview 8
Creating and Editing GPOs 11
Scoping GPOs 12
Linking GPOs 12
Security Filtering 13
Linking WMI Filters 14
Group Policy Inheritance 15
Delegating Group Policy 18
Delegating Creation of GPOs 18
Delegating an individual GPO 19
DelegatingPolicy-Related Permissions on SOMs 21
Delegating Linking of GPOs 22
Delegating Group Policy Modeling 22
Delegating Group Policy Results 23
Delegating Creation of WMI Filters 24
Delegating an individual WMI Filter 25
Reporting on GPO Settings 27
Administrative Templates Background 29
Administrative Templates and GPMC 29
Administrative Templates and Group...
Regístrate para leer el documento completo.