Microsoft
Enterprise Support/Modern Desktop
General
50255: Managing Windows Environments with Group Policy (50255)

In this 5-day course you will learn how to reduce costs and increase efficiencies in your network. You will discover how to consolidate the administration of an enterprise IT infrastructure with Group Policy, and you will learn to control and manage computer systems and domain users running Windows Server and Windows clients. Create Group Policies, implement administrative and security templates, and determine best practices when deploying software packages. Walk away with the experience and tools needed to optimize your enterprise systems and networks, implement administrative and security templates, and determine best practices when deploying software packages. Walk away with the experience and tools needed to optimize your enterprise systems and networks.

Download pdf
Duration: 5 Days
About the course

Prerequisites:

Experience with the Microsoft Windows Server 2008/2012 environments and a fundamental understanding of Active Directory.


Course Objectives:

Upon completing this course, the learner will be able to meet these overall objectives:

  • Features and functions of Group Policy
  • Use Group Policy management tools to manage security policies
  • Design a Group Policy infrastructure
  • Group Policy processing architecture
  • Back up, restore, import, and copy Group Policy Objects through the Group Policy
  • Management Console
  • Use Windows PowerShell to manage Group Policy
  • Implement security using Group Policy
  • Configure the desktop environment with Group Policy
  • Configure roaming profiles and Folder Redirection
  • Assign and publish software packages
  • Implement AppLocker and software restriction policies
  • Create and deploy Administrative Templates
  • Configure Group Policy preferences
Course content

Module 1: Introduction to Configuration Management

This module describes the basis of what configuration management is and how it functions.

  • Configuration Management Overview
  • Configuration Management Using Group Policy
  • Group Policy Features Introduced with Later Versions of Windows
  • Using Windows PowerShell in the Configuration Management Process

Module 2: Using Group Policy Management Tools

This module describes the differences between local and domain policies and the Group Policy management tools you can use to manage these policies. This module also describes the Group Policy refresh process and how to manually force a refresh ahead of the default interval.

  • Local and Domain Policies
  • Using Group Policy Management Console
  • Understanding Group Policy Refresh

Module 3: Designing a Group Policy Infrastructure

This module details the steps a successful Group Policy deployment should follow, linking your design to how your company can best use the features. Essential network components and security design are also defined.

  • Design Stages for a Group Policy Infrastructure
  • Planning your Group Policy Design
  • Designing Your Group Policy Solution
  • Deploying Your Group Policy Solution
  • Managing Your Group Policy Solution

Module 4: Understanding the Architecture of Group Policy Processing

This module details the concepts that you must grasp in order to troubleshoot Group Policy. The module also describes the options that are available to change the standard Group Policy processing sequence.

  • Group Policy Components in AD DS
  • Understanding the Group Policy Deployment Order
  • Modifying Group Policy Processing

Module 5: Troubleshooting and Backing Up GPOs

This module explains how to use the RSoP tools to determine whether policies are being processed in the correct manner. This module discusses how to use the available tools to troubleshoot policy issues; back up, restore, import, copy, and search for GPOs; and migrate GPOs from one domain to another.

  • Using Group Policy Troubleshooting Tools
  • Integration of RSoP Functionality
  • Group Policy Logging Options
  • Backing Up, Restoring, Importing, and Copying GPOs
  • Building Migration Tables

Module 6: Securing Windows Using Group Policy

This module defines the Windows security model and describes the process of using Group Policy to implement user account, computer account, and domain security.

  • Exploring the Windows Security Architecture
  • Securing User Accounts
  • Exploring Security Policies
  • Windows Firewall with Advanced Security
  • Implementing Domain Security
  • Security Policy Options for Window Client and Windows Server

Module 7: Implementing Application Security Using Group Policy

This module describes the process of securing applications in a Windows environment. It also explains how to implement UAC (User Account Control) to help prevent users from running unauthorized software, reducing the likelihood that viruses, Trojan horses, or spyware that might intrude upon the environment.

  • Managing UAC Settings
  • Defending Against Malware
  • Using AppLocker to Restrict Software
  • Implementing Windows App Security Settings

Module 8: Configuring the Desktop Environment with Group Policy

This module explains many of the settings that are available to configure and restrict the user desktop environment, such as Control Panel restrictions, Start Menu settings, and Windows Explorer configuration.

  • Exploring Script Types and Controlling Script Execution
  • Defining the Desktop, Start Menu, and Taskbar Settings
  • Defining the Control Panel Settings
  • Defining the Windows Components Settings
  • Configuring the Printer Management and Pruning Settings
  • Defining the Network Settings
  • Discovering the new Group Policy Settings

Module 9: Implementing User State Virtualization

This module explains explains the different options available to maintain the user's personal files and
settings.

  • Configuring Folder Redirection
  • Managing Offline Files
  • Implementing User Experience Virtualization
  • OneDrive for Business

Module 10: Assigning and Publishing Software Packages

This module explains how to use Group Policy for deploying software.

  • Using MSI Packages to Distribute Software
  • Using Group Policy as a Software Deployment Method
  • Deploying Software
  • Setting Up Distribution Points
  • Using the Systems Center Configuration Manager to Distribute Software

Module 11: Configuration Management with Windows PowerShell

This module explains how to navigate and use basic Windows PowerShell commands and how to use Windows PowerShell to manage Group Policy. It also explains how you can use PowerShell logon scripts with Group Policy.

  • Introducing Windows PowerShell
  • Using Windows PowerShell
  • Writing PowerShell Scripts
  • Windows PowerShell Library for Group Policy
  • Windows PowerShell-Based Logon Scripts

Module 12: Implementing PowerShell Desired State Configuration

This module will describe what DSC is all about and how to implement DSC to manage systems on the network.

  • Introducing Group Policy Preferences
  • Comparing Preferences and Policy Settings
  • Options for Applying Preferences
  • Configure Preference Settings 

Module 13: Configuring Group Policy Preferences

This module describes the function of Group Policy Preferences. You will learn how to combine Preferences and Policies, and how Preferences are different from Policies.

  • Introducing Group Policy Preferences
  • Comparing Preferences and Policy Settings
  • Options for Applying Preferences
  • Configuring Preferences Settings

Lab Outline:

Labs are designed to assure learners a whole practical experience, through the following practical activities:

  • Lab 1: Introducing Configuration Management
  • Lab 2: Using Group Policy Management Tools
  • Lab 3: Designing a Group Policy Infrastructure
  • Lab 4: Understanding the Group Policy Processing Architecture
  • Lab 5: Troubleshooting and Backing Up GPOs
  • Lab 6: Securing Windows Using Group Policy
  • Lab 7: Implementing Application Security Using Group Policy
  • Lab 8: Configuring the Desktop Environment with Group Policy
  • Lab 9: Implementing User State Virtualization
  • Lab 10: Assigning and Publishing Software Packages
  • Lab 11: Configuration Management with Windows PowerShell
  • Lab 12: Using PowerShell Desired State Configuration
  • Lab 13: Configuring Group Policy Preferences
Who Should Attend

This course is intended for Enterprise network staff responsible for help desk support, system administration, and network design.