Application Rules of group policies

Experiment 2: application rules of group policies

Lab Objectives

Taking disabling users in a domain to modify the desktop background as an example to verify the inheritance, blocking inheritance, forced inheritance, accumulation of policies, and conflict of policies

Lab Environment

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/45/4E/wKioL1Pm8MPjKyuyAAFI6TcuTZg697.jpg "Title =" 1.png" alt = "wkiol1pm8mpjkyuyaafi6tcutzg697.jpg"/>

 

Lab procedure

1. create user F in the domain, create organization unit Cu, and create user L and G in Cu

1) Start-Administrative Tools-Active Directory user and computer-users-New User

 

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/45/4E/wKiom1Pm77mxenkaAADv0aEFnNg076.jpg "Title =" 2.png" alt = "wkiom1pm77mxenkaaadv0aefnng076.jpg"/>

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/45/4E/wKioL1Pm8NLw79itAAEHLIjolpk383.jpg "Title =" 3.png" alt = "wkiol1pm8nlw79itaaehlijolpk383.jpg"/>

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/45/4E/wKioL1Pm8NKSbH4yAANNMcP4c_M660.jpg "Title =" 4.png" alt = "wkiol1pm8nksbh4yaannmcp4c_m660.jpg"/>

2) Start-Administrative Tools-Active Directory users and computers-right-click the domain (nds1407.com)-create an organizational unit

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/45/4E/wKiom1Pm78OiJNf2AACxHUlrii4900.jpg "Title =" 5.png" alt = "wkiom1pm78oijnf2aacxhulrii4900.jpg"/>

 

3) create user L and G as follows:

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/45/4E/wKiom1Pm78yxvfz8AAGbni5xOjs284.jpg "Title =" 6.png" alt = "wkiom1pm78yxvfz8aagbni5xojs284.jpg"/>

 

2. Authentication Policy inheritance

Start-management tools-Group Policy Management-right-click default domain policy-edit-user configuration-policy-manage template-control panel-personalization-double-click to Prevent desktop background changes-click Enable- OK

 

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/45/4E/wKioL1Pm8PrBB0uPAAMfMTCc8SY705.jpg "Title =" 7.png" alt = "wkiol1pm8prbb0upaamfmtcc8sy705.jpg"/>

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/45/4E/wKioL1Pm8PqS1pXmAAOf62Xzv5k335.jpg "Title =" 8.png" alt = "wkiol1pm8pqs1pxmaaof62xzv5k335.jpg"/>

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/45/4E/wKiom1Pm7-LCWYaOAAKZsVGrazQ003.jpg "Title =" 9.png" alt = "wKiom1Pm7-LCWYaOAAKZsVGrazQ003.jpg"/>

Client Login User View Verification

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/45/4E/wKiom1Pm7--gVMIeAAPAcXpxayg602.jpg "Title =" 10.png" alt = "wKiom1Pm7--gVMIeAAPAcXpxayg602.jpg"/>

 

3. Verify and block inheritance

Start-management tools-Group Policy Management-right-click ou-click to block inheritance

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/45/4E/wKiom1Pm8GeRP4xnAAJ3rY6vHYU307.jpg "Title =" 1.png" alt = "wkiom1pm8gerp4xnaaj3ry6vhyu307.jpg"/>

 

The client uses the domain user F, L, and g respectively to log on.

 

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/45/4E/wKiom1Pm8Heh06iUAAE-2cq_qpo955.jpg "Title =" 2.png" alt = "wKiom1Pm8Heh06iUAAE-2cq_qpo955.jpg"/>

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/45/4E/wKioL1Pm8ZDRaF78AAFF-2nnGtw785.jpg "Title =" 3.png" alt = "wKioL1Pm8ZDRaF78AAFF-2nnGtw785.jpg"/>

Result Verification

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/45/4E/wKiom1Pm8ITwu1VeAAOpbnatpM8803.jpg "Title =" 4.png" alt = "wkiom1pm8itwu1veaaopbnatpm8803.jpg"/>

 

4. Forced inheritance

Start-management tools-Group Policy Management-right-click default domain policy-click force

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/45/4E/wKiom1Pm8IzxJZDNAANiwHoNNRk744.jpg "Title =" 5.png" alt = "wkiom1pm8izxjzdna aniwhonnrk744.jpg"/>

 

Log out of the client and log on to user F, L, and g

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/45/4E/wKioL1Pm8ayjMAVmAAEob0-r3KY436.jpg "Title =" 6.png" alt = "wKioL1Pm8ayjMAVmAAEob0-r3KY436.jpg"/>

 

Result Verification

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/45/4E/wKiom1Pm8JywynGhAAOPP7A4dmg150.jpg "Title =" 7.png" alt = "wkiom1pm8jywynghaaopp7a4dmg150.jpg"/>

 

5. Policy Accumulation

1) Based on the above experiment, unblocking inheritance and unbinding, create a new GPO on CW, and set the user to open the default homepage http: // www/Baidu.com of the browser.

2) Start-management tools-Group Policy Management-right-click ou (CW)-click "create GPO in this domain and link here"-enter a name

 

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/45/4E/wKiom1Pm8K7z_AhPAAJbUcvLBY8124.jpg "Title =" 8.png" alt = "wkiom1pm8k7z_ahpaajbucvlby8124.jpg"/>

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/45/4E/wKioL1Pm8ceCIY2gAAB6YrhB01c683.jpg "Title =" 9.png" alt = "wkiol1pm8ceciy2gaab6ybmp 01c683.jpg"/>

Right-click "IE homepage"-edit-user configuration-policy-Windows Settings-Internet Explorer Maintenance-URL-double-click important URL-select Custom homepage-enter name

 

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/45/4E/wKiom1Pm8L2Br5epAAIrmBkaWSg959.jpg "Title =" 10.png" alt = "wkiom1pm8l2br5epaairmbkawsg959.jpg"/>

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/45/4E/wKioL1Pm8dax0ag5AAHbPPmPwto898.jpg "Title =" 11.png" alt = "wkiol1pm8dax0ag5aahbppmpwto898.jpg"/>

Log out of the client and log on to the user

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/45/4E/wKioL1Pm8eGAGTQRAAEqcy_kMpY697.jpg "Title =" 12.png" alt = "wkiol1pm8egagtqraaeqcy_kmpy697.jpg"/>

 

Result Verification

 

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/45/4E/wKiom1Pm8NSxCB3mAAOZ0JKfX14692.jpg "Title =" 13.png" alt = "wkiom1pm8nsxcb3maaoz0jkfx14692.jpg"/>

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/45/4E/wKioL1Pm8fmQHJ5GAAFAlecBhxw563.jpg "Title =" 14.png" alt = "wkiol1pm8fmqhj5gaafalecbhxw563.jpg"/>

 

6. policy conflicts

1) configure the default domain policy user to open the browser home page http://www.tarena.com, open the home page with ou (CW) user login authentication

2) start-management tools-Group Policy Management-right-click default domain policy-click Edit-edit-user configuration-policy-Windows Settings-Internet Explorer Maintenance-URL-double-click important URL-select from define homepage-enter a name

 

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/45/4E/wKiom1Pm8PbRIeLwAANsmBegw1I840.jpg "Title =" 15.png" alt = "wkiom1pm8pbrielwaansmbegw1i840.jpg"/>

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/45/4E/wKioL1Pm8hCgWJUmAAJISkQSQh8348.jpg "Title =" 16.png" alt = "wkiol1pm8hcgwjumaajiskqsqh8348.jpg"/>

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/45/4E/wKiom1Pm8PfjVGFzAAIEQFbeIyE900.jpg "Title =" 17.png" alt = "wkiom1pm8pfjvgfzaaie%beiye900.jpg"/>

Log out and renew Domain Users

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/45/4E/wKiom1Pm8QLS0IagAAEqcy_kMpY148.jpg "Title =" 18.png" alt = "wkiom1pm8qls0iagaaeqcy_kmpy148.jpg"/>

 

Result Verification

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/45/4E/wKioL1Pm8iWjDVvcAAFJr_SVVxg593.jpg "Title =" 19.png" alt = "wkiol1pm8iwjdvvcaafjr_svvxg593.jpg"/>

 

Problem and Experience Summary

This article is from the "fwlnsd1407" blog. For more information, contact the author!