50255: Managing Windows Environments with Group Policy Training

This module describes the basis of what configuration management is and how it functions.

Configuration Management Overview

Configuration Management Using Group Policy

Group Policy Features Introduced with Later Versions of Windows

Using Windows PowerShell in the Configuration Management Process

Lab1: Introducing Configuration Management

Boot and join the lab virtual machines to the domain

Explore the default Policy Settings

Explore Windows 10 and Windows Server 2016 interface

After completing this module, students will be able to:

Define configuration management

List the ways you can use configuration management in Windows

Describe the new Group Policy features available in the latest versions of Windows

Explain how PowerShell can be used with configuration management

This module describes the differences between local and domain policies and the Group Policy management tools you can use to manage these policies. This module also describes the Group Policy refresh process and how to manually force a refresh ahead of the default interval.

Local and Domain Policies

Using Group Policy Management Console

Understanding Group Policy Refresh

Lab1: Using Group Policy Management Tools

Working with Multiple Local Policies

Installing the GPMC on various Windows operating systems

Basic Group Policy Management techniques

After completing this module, students will be able to:

Describe the advantages of using domain policies instead of local policies

List the capabilities of the Group Policy Management Console

Describe the requirements for installing the Group Policy Management Console

Explain how to use the different GPMC features to create and manage policies

Describe the elements of the gpupdate command

This module details the steps a successful Group Policy deployment should follow, linking your design to how your company can best use the features. Essential network components and security design are also defined.

Design Stages for a Group Policy Infrastructure

Planning your Group Policy Design

Designing Your Group Policy Solution

Deploying Your Group Policy Solution

Managing Your Group Policy Solution

Lab1: Designing a Group Policy Infrastructure

Creating an OU Structure for Group Policy

Delegating GPO Management

Creating Starter GPOs

Using the AGPM to manage policies

After completing this module, students will be able to:

Describe the four stages of implementing Group Policy

Explain how to plan Group Policy in accordance with a company’s requirements

Describe the guidelines that you should follow when you create new GPOs

Explain how to manage Group Policy by delegating administration and setting permissions

This module details the concepts that you must grasp in order to troubleshoot Group Policy. The module also describes the options that are available to change the standard Group Policy processing sequence.

Group Policy Components in AD DS

Understanding the Group Policy Deployment Order

Modifying Group Policy Processing

Lab1: Understanding the Group Policy Processing Architecture

Working with Multiple GPO Levels

Using the Block Inheritance and Enforce Options

Implementing Security Filtering

Creating a WMI Filter

Working with Loopback Processing

After completing this module, students will be able to:

Describe the Active Directory components that you can use to deploy Group Policy

Explain the order in which Group Policy is deployed in Active Directory

Describe the methods that are available to modify Group Policy processing

This module explains how to use the RSoP tools to determine whether policies are being processed in the correct manner. This module discusses how to use the available tools to troubleshoot policy issues; back up, restore, import, copy, and search for GPOs; and migrate GPOs from one domain to another.

Using Group Policy Troubleshooting Tools

Integration of RSoP Functionality

Group Policy Logging Options

Backing Up, Restoring, Importing, and Copying GPOs

Building Migration Tables

Lab1: Troubleshooting and Backing Up GPOs

Using Tools for Troubleshooting

Backing Up and Restoring GPOs

Use Command Line Tools to Perform GPO Maintenance

After completing this module, students will be able to:

Describe the Group Policy troubleshooting tools

Describe the GPMC tools that have RSoP functionality

Describe the GPO logging tools used to obtain more detail about the GPO processing issues

Explain how to back up, restore, import, and copy GPOs using the GPMC

Explain how to build migration tables

This module defines the Windows security model and describes the process of using Group Policy to implement user account, computer account, and domain security.

Exploring the Windows Security Architecture

Securing User Accounts

Exploring Security Policies

Windows Firewall with Advanced Security

Implementing Domain Security

Security Policy Options for Window Client and Windows Server

Lab1: Securing Windows Using Group Policy

Using the Security Compliance Manager

Managing Auditing with a GOP

Create and Test Restricted Groups

Implement Security Templates

Creating a Windows Firewall Policy

After completing this module, students will be able to:

Describe the Windows security architecture

Explain how to secure user accounts with Group Policy

Explain how to harden computer accounts

Explain how to control the domain security policy with a GPO

This module describes the process of securing applications in a Windows environment. It also explains how to implement UAC (User Account Control) to help prevent users from running unauthorized software, reducing the likelihood that viruses, Trojan horses, or spyware might intrude upon the environment.

Managing UAC Settings

Defending Against Malware

Using AppLocker to Restrict Software

Implementing Windows App Security Settings

Lab1: Implementing Application Security Using Group Policy

Implementing UAC

Using AppLocker to Restrict Software

Configure Windows Defender with Group Policy

Windows 8.1 Client Lock Screen and App Policies

After completing this module, students will be able to:

Describe UAC

Describe the AppLocker features

Explain the features of Windows Apps

This module explains many of the settings that are available to configure and restrict the user desktop environment, such as Control Panel restrictions, Start Menu settings, and Windows Explorer configuration.

Exploring Script Types and Controlling Script Execution

Defining the Desktop, Start Menu, and Taskbar Settings

Defining the Control Panel Settings

Defining the Windows Components Settings

Configuring the Printer Management and Pruning Settings

Defining the Network Settings

Discovering the new Group Policy Settings

Lab1: Configuring the Desktop Environment with Group Policy

Using Logon Scripts

Configuring Desktop Settings

Managing Windows Components

Configuring Printers with Group Policy

Managing Network Settings

After completing this module, students will be able to:

Describe the startup, shutdown, logon, and logoff scripts and settings.

Identify the many ways to control the user desktop, Start menu, and taskbar settings

Explain how to restrict the Control Panel settings

Explain how to restrict operations that users can perform in Windows Explorer, Windows Internet Explorer, and Remote Desktop Services

Explain how to configure the printer management and pruning settings

Describe the network settings

This module explains the different options available to maintain the user's personal files and settings.

Configuring Folder Redirection

Managing Offline Files

Implementing User Experience Virtualization

OneDrive for Business

Lab1: Implementing User State Virtualization

Preparing for Folder Redirection,Offline Files, and UE-V

Configuring Folder Redirection

Managing Offline Files

Implementing User Experience Virtualization

After completing this module, students will be able to:

Explain how to redirect user folders to a server

Describe the Offline Files feature

Explain the purpose of User Experience Virtualization

Describe the OneDrive for Business feature

This module explains how to use Group Policy for deploying software.

Using MSI Packages to Distribute Software

Using Group Policy as a Software Deployment Method

Deploying Software

Setting Up Distribution Points

Using the Systems Center Configuration Manager to Distribute Software

Lab1: Assigning and Publishing Software Packages

Creating a Shared Directory Structure on a Server

Creating a Custom MSI package

Repackaging an Existing Install Package

Deploying Software Packages with a GPO

After completing this module, students will be able to:

Describe the basic elements of an MSI package

Determine when to build or repackage your own

Define the requirements for distributing software via Group Policy

Describe when you might want to assign and publish software

Explain how to upgrade and remove packages

Explain how to set up distribution points for software deployment

List the advantages of using SCCM to distribute software instead of Group Policy

This module explains how to navigate and use basic Windows PowerShell commands and how to use Windows PowerShell to manage Group Policy. It also explains how you can use PowerShell logon scripts with Group Policy.

Introducing Windows PowerShell

Using Windows PowerShell

Writing PowerShell Scripts

Windows PowerShell Library for Group Policy

Windows PowerShell-Based Logon Scripts

Lab1: Configuration Management with Windows PowerShell

Exploring the Windows PowerShell

Using Windows PowerShell to Manage GPOs

After completing this module, students will be able to:

Describe the Windows PowerShell features

Explain how to perform the basic Windows PowerShell operations

Explain how to access the Windows PowerShell library for Group Policy

Manage systems using PowerShell commands

This module will describe what DSC is all about and how to implement DSC to manage systems on the network.

Introducing Group Policy Preferences

Comparing Preferences and Policy Settings

Options for Applying Preferences

Configure Preference Settings

Lab1: Using PowerShell Desired State Configuration

Write a PowerShell Desired State Configuration Script

Create a DSC

Implement DSC

After completing this module, students will be able to:

Describe the purpose of Group Policy Preferences

Explain the differences between Preferences and Policy Settings

Describe the Windows and Control Panel Settings

List Advanced Preferences Configuration Options

This module describes the function of Group Policy Preferences. You will learn how to combine Preferences and Policies, and how Preferences are different from Policies.

Introducing Group Policy Preferences

Comparing Preferences and Policy Settings

Options for Applying Preferences

Configuring Preferences Settings

Lab1: Configuring Group Policy Preferences

Implementing Computer Preferences

Implementing User Preferences

After completing this module, students will be able to:

Describe the purpose of Group Policy Preferences

Describe the differences between Preferences and Policy Settings

Identify the settings that you can configure in the Computer Configuration and User Configuration sections of the Group Policy Management Console

Describe the Windows and Control Panel settings