[guzman27]

Help me solve this scenario..

The CRM product has gone through an upgrade and as part of the upgrade a new Group Policy Administrative Template has been provided. How do you use the new Administrative Template to assign the settings you want to a new Group Policy Object?


Thank You

[chuckhole]

There are two basic sections for a GP Template. There is a Computer section and a User section. The computer section is applied to the HKLM hive in the registry and the user section is applied to the HKLU section of the registry.

To use the template, go to the Computer or User section of the GP Editor and navigate to Administrative Templates and right click and select Add\Remove Templates.

Group Policy settings have three basic actions: No Change to current setting, Apply a setting, Deny a setting.

Also, after creating a policy, there is a policy heiarchy. If there are conflicting settings within multple policies, the one with the highest priority is set.

Remember that there are two parts to a policy: Computer and User. Therefore, there are two types of groups that the policy gets applied to: User groups and Computer groups. So, for example, if you are creating a software installation policy, this is applied to computers, you must add computers to the policy in the Security filtering section of who it applies to. If the policy has both computer and user settings, then both computers and users must be added to the Security filtering. For this reason, it is best to split your policy into two; one for computers and one for users.

We also preface the group name in AD with the letters GPO to signify the special nature of the group type and we further segregate our groups into separate OU's as well (ie. Distribution Groups, GPO's, Security, etc.).