Group Policy and Login Scripts

What does a domain group policy configure?

computer settings and user profile settings

Through what standard objects and folders are some group policy settings exposed?

Security Settings

What can be installed to expose other group policy settings?

an Administrative Template

What can Administrative Templates be used to define settings in?

third-party software

What else can group policy be used to do automatically?

deploy software

How can a domain group policy object be applied to multiple user accounts and computers?

by linking a GPO to a domain or OU object in AD

If Sales GPOs are attached to the Sales OU, what do the policies apply to?

every user and computer account placed in the Sales OU

Can a domain or OU be linked to multiple GPOs?

yes

What determines the resultant set of policies that apply to a particular computer or user account?

a system of inheritance

When are policies applied and refreshed?

at sign-in and refreshed periodically, normally every 90 minutes

What command is used to apply a new or changed policy to a computer and account profile immediately?

gpupdate

What does the /force switch do with gpupdate?

causes all policies, new and old, to be reapplied

What switches can gpupdate use if the policy setting requires sign-out or reboot?

/logoff or /boot

What does gpresult display?

the RSoP for a computer and user account

What happens if gpresult is run without switches?

the help page is displayed

What can the /s, /u, and /p switches specify with gpresult?

a host by name or IP address, user account, and password

What can the /r switch do with gpresult?

display policies for the desktop

What does a login script perform?

some type of configuration or process activity when the user signs in

How can a login script be assigned?

via the user profile or via group policy

What can a login script be used to configure for the user?

environmental variables, mapping drives to specific server-based folders, and mapping to printers or other resources

How can a login script be used for network sign-on security?

ensure that the client meets the security requirements for signing on to the network

What can happen if the client has out-of-date software?

login can be denied until the software is updated

How do some companies differ in handling these tasks?

some prefer to use login scripts, and some prefer GPO