MCSA Exam 70-742, Chapter 4 - Configuring Group Policies, terms

administrative template file

is a file that supports the implementation of Microsoft Windows Group Policy and centralized user and machine management in Active Directory environments.

ADMX central store

A centralized location for maintaining ADMX files so that when an ADMX file is modified from one domain controller, all DCs receive the updated file.

assigned application

A method of software deployment in which an application can be installed automatically when the computer starts, a user logs on to the domain, or a user opens a file associated with the application.

batch file

A text file containing a series of OS commands.

domain based GPO

A nonlocal GPO created in Active Directory and linked to a site, domain, or OU. Object is stored in AD DS, replicated to other DCs in domain, sing appropriate AD DS replication.

elevation

A process that occurs when a user attempts to perform an action requiring administrative rights and is prompted to enter credentials.

folder redirection

A category of Group Policy that allows files to be redirected to a network drive for backup and makes them accessible from anywhere on the network.

Group Policies

Provides the ability to configure and manage objects within AD DS network infrastructure. They are applied to your sites, domains, and OUs to quickly and easily manage many users and computers that require the same settings.

Group Policy Categories

What are these?

1. Windows and app settings

2. Software deployment

3.Folder redirection

4. Security settings

5. Infrastructure settings

Group Policy Container - GPC

- An object stored in AD DS, replicated to other DCs in domain, using appropriate AD DS replication.

- A GPO component that's an Active Directory object stored in the System\Policies folder. The GPC stores GPO properties and status information but no actual policy settings.

Group Policy preferences

A feature of Group Policy that contains settings organized into categories and enables administrators to set up a baseline computing environment yet still allows users to make changes to configured settings.

Group Policy Template

- GPT

- It is a collection of files and folders stored in SYSVOL folder on all DC, that contain actual GPO settings.

- It contains all the policy settings that make up a GPO as well as related files, such as scripts.

- Stored in %SystemRoot%\SYSVOL\Domain\Policies\{GUID}

GPO Tools

Uses the following to implement GPO:

* Group Policy Management Console

* Group Policy Management Editor

* PowerShell

Infrastructure settings

A category of Group Policy that configure infrastructure settings for things like wireless network profiles and firewalls.

item-level targeting

A feature of group policy preferences that allows an administrator to target specific users or computers based on criteria.

local GPO

A type of Group Policy Object associated with the local computer, regardless of user. Applicable to non-forest computer.

managed policy settings

A type of group policy setting whereby the setting on the user or computer account reverts to its original state when the object is no longer in the scope of the GPO containing the setting.

Microsoft Software Installation (MSI) file

A collection of files gathered into a package with an .msi extension that contains the instructions regarding what Windows Installer needs to install an application.

published application

An application package made available via Group Policy for users to install by using Programs and Features in Control Panel. The application is installed automatically if a user tries to run it or opens a document associated with it.

script

A series of commands that have been saved in a text file to be repeated easily at any time.

Security settings

A category of Group Policy that apply standard security settings to collections of users and computers.

security template

Groups of policies that can be loaded in one procedure.

Software deployment

A category of Group Policy that deploy, update, and remove desktop apps from your organization's computers.

Starter GPO

A GPO template that can be used as a baseline for creating new GPOs, much like user account templates.

unmanaged policy settings

A type of group policy setting that persists on the user or computer account, meaning that it remains even after the computer or user object falls out of the GPO's scope.

User Account Control policies

Policies that determine what happens on a computer when a user attempts to perform an action that requires elevation. See also elevation.

Windows and app settings

A category of Group Policy that provides a consistent interface for Windows and the installed apps.