1 00:00:03,810 --> 00:00:08,160 Creating a new group policy is relatively straightforward and should become second nature. 2 00:00:08,160 --> 00:00:12,840 Once you've completed this a few times to create a new policy right click on the location where you 3 00:00:12,840 --> 00:00:18,190 want the policy to apply and then click on Create a GPO in this domain and link it here. 4 00:00:18,240 --> 00:00:21,260 You'll then see the new GPO dialog box here. 5 00:00:21,270 --> 00:00:25,430 You can name the policy and also use a starter GPO as explained earlier. 6 00:00:25,440 --> 00:00:28,690 This is a template that can be used for creating a new policy. 7 00:00:28,710 --> 00:00:34,620 Once you've named the new policy and selected NERC GPO is if needed click Okay you will then see your 8 00:00:34,620 --> 00:00:38,150 new policy in the dropdown box on the left hand side of the screen. 9 00:00:38,250 --> 00:00:42,900 When you click on the policy to access the new settings of warning dialog box will appear. 10 00:00:42,900 --> 00:00:48,270 This states you have selected a link to a group policy object except for changes to link prophecies 11 00:00:48,390 --> 00:00:54,240 changes you make here are global so the GPO will impact all of the locations where this GPO is linked 12 00:00:54,540 --> 00:00:59,580 group policy objects can be linked to multiple locations depending on the requirements of individual 13 00:00:59,580 --> 00:01:00,450 companies. 14 00:01:00,480 --> 00:01:05,700 This warning simply means that if a GPO is linked to multiple locations you only need to make a change 15 00:01:05,700 --> 00:01:08,760 once in order to affect all relevant locations. 16 00:01:08,790 --> 00:01:11,870 If you need a GPO that's slightly different for each department. 17 00:01:11,880 --> 00:01:16,680 This means you would need separate policies for each to access the settings for the policy that you 18 00:01:16,680 --> 00:01:19,920 just created click okay on the warning dialog box. 19 00:01:19,920 --> 00:01:21,390 This will then appear on screen. 20 00:01:21,390 --> 00:01:23,550 You'll notice that there are four different types here. 21 00:01:23,550 --> 00:01:27,910 These are scope details settings and delegation in the scope type. 22 00:01:27,960 --> 00:01:32,790 You'll see the links and security filter and section the Links section provides details of where the 23 00:01:32,790 --> 00:01:33,990 policy is linked to. 24 00:01:34,050 --> 00:01:39,930 For example specific organizational units where as a security filter in Section specifies who the policy 25 00:01:39,930 --> 00:01:45,660 applies to the default setting here being authenticated users which simply means anyone with a valid 26 00:01:45,660 --> 00:01:48,100 username and password to access the system. 27 00:01:48,120 --> 00:01:53,340 The details tab contains details such as the domain it is applied to the owner of the policy usually 28 00:01:53,340 --> 00:01:58,860 who created it the created a modified date as well as the user and computer versions to different sections 29 00:01:58,860 --> 00:02:02,540 of every group policy explained in more detail in the next lecture. 30 00:02:02,620 --> 00:02:05,120 Next we've got the unique idea of the policy. 31 00:02:05,130 --> 00:02:10,620 This is set on creation and stays the same regardless of what the policy is renamed our future point 32 00:02:10,890 --> 00:02:16,860 GPO status simply states whether the policy is enabled or disabled the settings top allows you to view 33 00:02:16,860 --> 00:02:21,600 the sentence have been configured within the group policy and also contains the settings from the previous 34 00:02:21,600 --> 00:02:26,280 two tabs so it can be a useful short course if you need to access information in a hurry. 35 00:02:26,280 --> 00:02:30,420 Finally the delegation tab contains the security settings for the GPO. 36 00:02:30,420 --> 00:02:35,340 This is slightly different from the security filter in section as it also contains system users and 37 00:02:35,340 --> 00:02:40,380 groups and is therefore a more complete record of the settings and it's also the only place you can 38 00:02:40,380 --> 00:02:43,430 deny access to a policy as opposed to allowing access. 39 00:02:43,440 --> 00:02:48,230 Now that we've covered creating a new group policy let's move on to user and computer policies.