Preliminary understanding of Group Policy, Active directory family 21

Group Policy is a very important technology in Active Directory, and many friends have heard about the importance of Group Policy for management and understand that some difficult problems can be solved with legendary "strategies". But it's not clear how Group Policy is understood, how it is deployed, and how it is managed. Today we will organize a series of blog posts for you to introduce the ins and outs of group strategy, and strive to make better use of group strategy to improve the management work.

Let's start with the concept of Group Policy, what is Group Policy? Group Policy is an infrastructure that allows you to perform configuration on a user or computer. This concept sounds obscure and is not easy to understand. In fact, in layman's parlance, Group Policy is similar to the registry, and is a technology that can modify the settings of a user or computer. What is the difference between the set of policies and the registry? The registry can be set only for one user or one computer, but Group Policy may be set up for multiple users and multiple computers. This you understand the advantages of Group Policy, in an enterprise with 1000 users, if we use the registry to configure, we may need to modify the registry on 1000 different computers. But if you use Group Policy instead, just create a group policy and then deploy it to 1000 computers at a suitable level.

Group Policy and Active Directory, which can be deployed at the OU, site, and domain levels, and of course on the local computer, but not all of the features in Group Policy deployed on the local computer, only with Active Directory, Group Policy to achieve full potential. Group Policy deployments are different at different levels of priority, local computer < site < domain <ou. We can select the appropriate deployment level for Group Policy based on administrative tasks.

The Group Policy object is stored in two locations, the Active Directory container that links the GPO, and the Sysvol folder on the domain controller. GPOs are abbreviations for Group Policy objects, a collection of Group Policy settings, and a virtual object stored in Active Directory. A GPO consists of a Group Policy container (GPC) and a Group Policy template (GPT), which contains the property information for the GPO, stored in each domain controller Active Directory in the domain, and GPT contains the data for the GPO, stored in the/policies subdirectory of the SYSVOL.

Group Policy Management is available through the Group Policy Editor and the Group Policy Management Console (GPMC), which is the Group Policy management tool that is brought in by the Windows operating system, and can modify the settings in the GPO. GPMC is a more powerful Group Policy editing tool, where GPMC can create, manage, and deploy GPOs, and the latest GPMC can be downloaded from the Microsoft Web site.

At this point, we have a certain understanding of the function, structure and management tools of Group Policy, and we will show you how to deploy and manage Group Policy in the next blog post.

Source: http://yuelei.blog.51cto.com/202879/209568