Question

• Your boss came to you and asked about Group Policies. He doesn't understand how Group Policies work, or the reason to have them to begin with. Discuss what you would say to this computer novice that manages you. (Don't go the easy route and say "Leave me alone" or "None of your business", because we all know that wouldn't really fly in a business setting.) Discuss why you need Group Policies, how you would administrate them, and what could happen if you didn't have them.Discuss why editing the two default GPOs is not advisable.

• Within GPO filtering, discuss how security filtering uses permissions to restrict objects from accessing a GPO.

• Describe how GPO Backup and Restore works. What makes this tool necessary?

• Describe the four ways to identify applications designated as exceptions to the default rule in the Security Settings Subnode: Software Restriction Policies section.

Answer at least one of the question above . Thanks

Answer 1

Since we are dealing with a novice man,

We can answer in basic terms/ sentences.

What is actually group policy is? Why we need a group policy?

Group Policy is kind of a hierarchy infrastructure , that allows a network administrator in charge of Microsoft's Active Directory to implement specific configurations for users and computers. Group Policy is primarily a security tool, and can be used to apply security settings to users and computers. Group Policy allows administrators to define security policies for users and for computers. These policies, which are collectively referred to as Group Policy Objects (Gpo), are based on a collection of individual Group Policy settings.

There are types of group policies

1.Centralized Group Policy

If you’re using a Windows computer in an Active Directory environment, Group Policy settings can be defined on the domain controller. Network administrators have one place where they can configure a variety of Windows settings for every computer on the network. These settings can also be enforced, so users can’t change them. For example, using group policy, a network administrator can block access to certain sections of the Windows control panel, or set a specific website as the home page for every computer on the network.This can be useful for locking down computers, restricting access to specific folders, control panel applets, and applications. It can also be used to change a variety of Windows settings, including ones that can’t be changed from the control panel or require registry tweaks to change

2.

Local Group Policy

Group Policy isn’t only useful for networks of computers in businesses or schools, however. If you’re using a Professional version of Windows, you can use the local Group Policy Editor to change Group Policy settings on your computer.

Using Group Policy, you can tweak some Windows settings that aren’t normally available from the graphical interface. For example, if you want to set a custom login screen in Windows 10, you can either use the Registry Editor or the Group Policy Editor – it’s easier to change this setting in the Group Policy Editor. You can also tweak other areas of Windows 7 with the Group Policy Editor — for example, you can hide the notification area

The Benefits of Group Policy

The benefits of Group Policy are not limited solely to security, there are a number of other advantages that are worth mentioning.

• Password Policy: Many organizations are operating with relaxed password policies, with many users often having passwords set to never expire. Passwords that aren’t regularly rotated, are too simple or use common passphrases are at risk of being hacked through brute force. GPOs can be used to establish password length, complexity and other requirements.
• Systems Management: GPOs can be used to simplify tasks that are at best mundane and at worst critically time consuming. You can save yourself hours and hours of time configuring the environment of new users and computers joining your domain by using GPOs to apply a standardized, universal one.
• Health Checking: GPOs can be used to deploy software updates and system patches to ensure your environment is healthy and up to date against the latest security threats.

Thanks.