Group Policy

Our Group Policy Setup

Group Policy is what allows us to configure settings that will be propagated by Active Directory to the appropriate computers and servers. It allows us to have direct control over windows and how the computers will behave in their different environments. It is where all of our Security Policy presides as well, as Group Policy is where all password and security settings are configured, as they are security settings in Windows.

To view Group Policy settings and configurations, login to one of the domain controllers and open Group Policy Management.

Chrome Settings

This sets security settings and basic delegation for chrome. to view exactly what this does, click on Chrome Settings, and click on the settings tab. You can then click the drop down to view what it changes. This policy specifically is old, and only really affects older devices.

Default Domain Controllers Policy

This policy sets all of our domain controller settings, including who is able to access them. This is one of the most important and most detailed policies. To view all of it's changes, click on it and click settings, then use the dropdowns.

Default Domain Policy

This policy defines our main domain policies for CISCOACA.local, it mostly sets our password/lockout policies along with encryption settings. To view all of it's changes, click on it and click settings, then use the dropdowns.

Disable Roaming Profiles

This policy disables the roaming profiles that will exist in user's folders. These profiles are popular for viruses to run as, as they have high rights and are old/deprecated. To view how it makes these changes, click on it and click settings, then use the dropdowns.

IE, Mapping

This maps our network drives and also sets all of our Internet Explorer security settings. Please don't use Internet Explorer though. The network drives are where we are able to store all of our shared files, and hosts our documents folders to make sure they are backed up on the network and easily accessible from every computer. This does not map the documents folder though. To view all of it's changes, click on it and click settings, then use the dropdowns.

Map My Documents

This redirects the documents folder to be stored on a shared folder in Loki. It also sets the security settings so only the correct person can access their documents folder. It also configures internet explorer and start menu policies that are affected by this change. To view all of it's changes, click on it and click settings, then use the dropdowns.

Mapping EZNews

This maps a network drive for the program EZNews. This was used for journalism class. This is old and we don't use it anymore, but the program was expensive so we are using this there. To view how it changes, click on it and click settings, then use the dropdowns.

==