Network Plus Certification Creating and Applying a Starter GPO
What’s important to remember about the default domain and domain controllers policies is that they will affect settings for just about everything. On the exam, you may be asked questions regarding this particular topic. If so, remember that in the real world this isn?t a very good practice; however, on the exam, it’s more important that you understand the impact of modifying the policy. If it’s changed, then mcitp enterprise administrator it affects everyone in the domain.
Similarly to how delegation is used in other parts of their network infrastructure, administra- tors can use delegation with Group Policy to relieve the burden of a large number of every- day tasks involving deploying and implementing Group Policy. With Windows Server 2008, administrators can delegate many Group Policy tasks as de?ned in the Microsoft Group Policy deployment guidelines, including the following:
Managing GPOs Managing GPO links
Performing tasks on GPOs
Creating GPOs
Creating and editing WMI filters
As with all delegation, you need to exercise extreme caution. Putting too much authority into the hands of one user or a group of users can have serious rami?cations if the proper due diligence isn?t done regarding the amount of control they have over the enterprise.
You can adjust these settings on the Delegation tab of the GPMC; they are mcitp server administrator up to the administrator?s discretion. Keep in mind that Group Policy security, by default, is divided into six separate categories:
Creating GPOs Linking GPOs
Editing, deleting, and modifying the security of GPOs
Editing GPOs
Modeling GPOs
Performing RSoP of GPOs
When making delegation decisions, you have to keep each of these abilities in mind.
Sometimes the default set of groups or users can be useful in determining GPO delegation. You can add an individual user to a default group without having to go through the process of customizing an individual group for that user.