Group Policy
Our Group Policy Setup
Group Policy is what allows us to configure settings that will be propagated by Active Directory to the appropriate computers and servers. It allows us to have direct control over windows and how the computers will behave in their different environments. It is where all of our Security Policy presides as well, as Group Policy is where all password and security settings are configured, as they are security settings in Windows.
To view Group Policy settings and configurations, login to one of the domain controllers and open Group Policy Management.
Chrome Settings
This sets security settings and basic delegation for chrome. to view exactly what this does, click on Chrome Settings, and click on the settings tab. You can then click the drop down to view what it changes. This policy specifically is old, and only really affects older devices.
Default Domain Controllers Policy
This policy sets all of our domain controller settings, including who is able to access them. This is one of the most important and most detailed policies. To view all of it's changes, click on it and click settings, then use the dropdowns.
Default Domain Policy
This policy defines our main domain policies for CISCOACA.local, it mostly sets our password/lockout policies along with encryption settings. To view all of it's changes, click on it and click settings, then use the dropdowns.
Disable Roaming Profiles
This policy disables the roaming profiles that will exist in user's folders. These profiles are popular for viruses to run as, as they have high rights and are old/deprecated. To view how it makes these changes, click on it and click settings, then use the dropdowns.
IE, Mapping
This maps our network drives and also sets all of our Internet Explorer security settings. Please don't use Internet Explorer though. The network drives are where we are able to store all of our shared files, and hosts our documents folders to make sure they are backed up on the network and easily accessible from every computer. This does not map the documents folder though. To view all of it's changes, click on it and click settings, then use the dropdowns.
Map My Documents
This redirects the documents folder to be stored on a shared folder in Loki. It also sets the security settings so only the correct person can access their documents folder. It also configures internet explorer and start menu policies that are affected by this change. To view all of it's changes, click on it and click settings, then use the dropdowns.
Mapping EZNews
This maps a network drive for the program EZNews. This was used for journalism class. This is old and we don't use it anymore, but the program was expensive so we are using this there. To view how it changes, click on it and click settings, then use the dropdowns.
Network Printers
This policy automatically registers our network's printers with all of our domain computers. This lets us all print without having to set things up. To view all of it's changes, click on it and click settings, then use the dropdowns.
Security Policy
Visit Security Policy for more info on this. It is what sets most of our security settings.
Time Sync
This configures all of our domain computers to talk to the correct NTP server to ensure that everything is synced with the correct time. It also defines the ADMX files that affect how group policy is received. This lets us all print without having to set things up. To view all of it's changes, click on it and click settings, then use the dropdowns.
Web Applications Certificate Installer
This sets all of the affected computers so that they are able to receive web application certificates from programs like Sophos. This lets us all print without having to set things up. To view all of it's changes, click on it and click settings, then use the dropdowns.