Creating a new group policy is relatively straightforward and should become second nature.
Once you've completed this a few times to create a new policy right click on the location where you
want the policy to apply and then click on Create a GPO in this domain and link it here.
You'll then see the new GPO dialog box here.
You can name the policy and also use a starter GPO as explained earlier.
This is a template that can be used for creating a new policy.
Once you've named the new policy and selected NERC GPO is if needed click Okay you will then see your
new policy in the dropdown box on the left hand side of the screen.
When you click on the policy to access the new settings of warning dialog box will appear.
This states you have selected a link to a group policy object except for changes to link prophecies
changes you make here are global so the GPO will impact all of the locations where this GPO is linked
group policy objects can be linked to multiple locations depending on the requirements of individual
companies.
This warning simply means that if a GPO is linked to multiple locations you only need to make a change
once in order to affect all relevant locations.
If you need a GPO that's slightly different for each department.
This means you would need separate policies for each to access the settings for the policy that you
just created click okay on the warning dialog box.
This will then appear on screen.
You'll notice that there are four different types here.
These are scope details settings and delegation in the scope type.
You'll see the links and security filter and section the Links section provides details of where the
policy is linked to.
For example specific organizational units where as a security filter in Section specifies who the policy
applies to the default setting here being authenticated users which simply means anyone with a valid
username and password to access the system.
The details tab contains details such as the domain it is applied to the owner of the policy usually
who created it the created a modified date as well as the user and computer versions to different sections
of every group policy explained in more detail in the next lecture.
Next we've got the unique idea of the policy.
This is set on creation and stays the same regardless of what the policy is renamed our future point
GPO status simply states whether the policy is enabled or disabled the settings top allows you to view
the sentence have been configured within the group policy and also contains the settings from the previous
two tabs so it can be a useful short course if you need to access information in a hurry.
Finally the delegation tab contains the security settings for the GPO.
This is slightly different from the security filter in section as it also contains system users and
groups and is therefore a more complete record of the settings and it's also the only place you can
deny access to a policy as opposed to allowing access.
Now that we've covered creating a new group policy let's move on to user and computer policies.