Group Policy Series Two: the load process for Group Policy

http://jary3000.blog.51cto.com/610705/121770

Last time we studied.Group Policy features and management tools, what are some of the components for Group Policy? Domain users log on at the client, how does Group Policy load?

One, the storage of Group Policy objects: (GPC+GPT)
After we create a new Group Policy through Gpmc.msc, we actually build a GPO (Group Policy Object), which is what we usually call a GPO.
So what containers can we link GPOs to? We can only link GPOs on Lsdou these containers. That is, local, Site, Domain, OU (organizational unit), about these basic concepts, you can find in this site. I've talked about it before.
As shown in: is an example of a new and linked GPO.

Take a name, such as a, click again, choose Edit, open a thing called "Group Policy Editor", you can set the "Computer Configuration" and "User Configuration" items to the corresponding settings.

The GPO that I'm going to say is actually made up of GPC (Group Policy Container) and GPT (Group Policy template). What is the role of the two and where is the storage place, see:


Let's take a look at it, as shown in the GPO:


After viewing the GPC, after you have opened Aduc, select "View"---advanced features, you can expand as follows:


View GPT needs to open the following shared share, where there is a corresponding GPT, open the selected this, you can see the specific configuration folder.


Second, the Group Policy loading process:
Now that we know the composition of the GPO, let's take a look at how a user or computer loads the specific GPT.
In fact, regardless of whether the user or computer will always belong to a container, such as an OU or a domain, if the user belongs to a domain, then in the process of logging on to the domain, it checks the contents of the gPLink in the attribute value of that domain (container) to see that the container links several GPOs, as shown in:


Knowing which GPOs are linked, you will find these GPOs, the specific order to find the general in accordance with the order of Lsdou to find, after I will introduce this piece of content. By gPLink The attribute value we know the specific application of the GPO, we just as shown, right-click on the GPO's properties, find the versionnumber value, the user will put himself versionnumber and it as a comparison, if the new, The specific GPT setting is applied by finding the value of the Gpcfilesyspath property in the properties of the GPC. As shown in the following two graphs:




Of course, is the application of computer configuration or User configuration, or to see the specific configuration. If the user's container is linked with a GPO and there is a corresponding user configuration in its GPT, the user configuration is applied, and if the user logs on to a computer that contains a GPO and has a corresponding computer configuration in its GPT, the computer configuration is applied. It is also possible to apply both User Configuration and Computer configuration at the same time.

I think through this process, you should understand the principle of the loading of the GPO. Today's study is here. Next lesson we'll learn about the prerequisites for a user or Computer application GPO.

This article is from the "Qianshan Island owner of the Microsoft Technology Space Station" blog, please be sure to keep this source http://jary3000.blog.51cto.com/610705/121770

Group Policy Series Two: the load process for Group Policy