Course 50255-E: Managing Windows Environments with Group Policy

Microsoft

Course 50255-E: Managing Windows Environments with Group Policy

Share This Learning Path

In this course you will learn how to reduce costs and increase efficiencies in your network. You will discover how to consolidate the administration of an enterprise IT infrastructure with Group Policy, and you will learn to control and manage computer systems and domain users running Windows Server and Windows clients. Create Group Policies, implement administrative and security templates, and determine best practices when deploying software packages. Walk away with the experience and tools needed to optimize your enterprise systems and networks. Implement administrative and security templates, and determine best practices when deploying software packages. Walk away with the experience and tools needed to optimize your enterprise systems and networks.

Audience Profile

This course is intended for Enterprise network staff responsible for help desk support, system administration, and network design.

Prerequisites

Course outline

Module 1: Introduction to Configuration Management

Module Overview

This module describes the basis of what configuration management is and how it functions.

Lessons

Configuration Management Overview
Configuration Management Using Group Policy
Group Policy Features Introduced with Later Versions of Windows
Using Windows PowerShell in the Configuration Management Process

Lab Sessions

Introducing Configuration Management

Lab Lessons

Boot and join the lab virtual machines to the domain
Explore the default Policy Settings
Explore Windows 10 and Windows Server 2016 interface

After completing this module, students will be able to:

Define configuration management.
List the ways you can use configuration management in Windows.
Describe the new Group Policy features available in the latest versions of Windows.
Explain how PowerShell can be used with configuration management.

Module 2: Using Group Policy Management Tools

Module Overview

This module describes the differences between local and domain policies and the Group Policy management tools you can use to manage these policies. This module also describes the Group Policy refresh process and how to manually force a refresh ahead of the default interval.

Lessons

Local and Domain Policies
Using Group Policy Management Console
Understanding Group Policy Refresh

Lab Sessions

Using Group Policy Management Tools

Lab Lessons

Working with Multiple Local Policies
Installing the GPMC on various Windows operating systems
Basic Group Policy Management techniques

After completing this module, students will be able to:

Describe the advantages of using domain policies instead of local policies.
List the capabilities of the Group Policy Management Console.
Describe the requirements for installing the Group Policy Management Console.
Explain how to use the different GPMC features to create and manage policies.
Describe the elements of the gpupdate command.

Module 3: Designing a Group Policy Infrastructure

Module Overview

This module details the steps a successful Group Policy deployment should follow, linking your design to how your company can best use the features. Essential network components and security design are also defined.

Lessons

Design Stages for a Group Policy Infrastructure
Planning your Group Policy Design
Designing Your Group Policy Solution
Deploying Your Group Policy Solution
Managing Your Group Policy Solution

Lab Sessions

Designing a Group Policy Infrastructure

Lab Lessons

Creating an OU Structure for Group Policy
Delegating GPO Management
Creating Starter GPOs
Using the AGPM to manage policies

After completing this module, students will be able to:

Describe the four stages of implementing Group Policy.
Explain how to plan Group Policy in accordance with a company’s requirements.
Describe the guidelines that you should follow when you create new GPOs.
Explain how to manage Group Policy by delegating administration and setting permissions.

Module 4: Understanding the Architecture of Group Policy Processing

Module Overview

This module details the concepts that you must grasp in order to troubleshoot Group Policy. The module also describes the options that are available to change the standard Group Policy processing sequence.

Lessons

Group Policy Components in AD DS
Understanding the Group Policy Deployment Order
Modifying Group Policy Processing

Lab Sessions

Understanding the Group Policy Processing Architecture

Lab Lessons

Working with Multiple GPO Levels
Using the Block Inheritance and Enforce Options
Implementing Security Filtering
Creating a WMI Filter
Working with Loopback Processing

After completing this module, students will be able to:

Describe the Active Directory components that you can use to deploy Group Policy.
Explain the order in which Group Policy is deployed in Active Directory.
Describe the methods that are available to modify Group Policy processing.

Module 5: Troubleshooting and Backing Up GPOs

Module Overview

This module explains how to use the RSoP tools to determine whether policies are being processed in the correct manner. This module discusses how to use the available tools to troubleshoot policy issues; back up, restore, import, copy, and search for GPOs; and migrate GPOs from one domain to another.

Lessons

Using Group Policy Troubleshooting Tools
Integration of RSoP Functionality
Group Policy Logging Options
Backing Up, Restoring, Importing, and Copying GPOs
Building Migration Tables

Lab Sessions

Troubleshooting and Backing Up GPOs

Lab Lessons

Using Tools for Troubleshooting
Backing Up and Restoring GPOs
Use Command Line Tools to Perform GPO Maintenance

After completing this module, students will be able to:

Describe the Group Policy troubleshooting tools.
Describe the GPMC tools that have RSoP functionality.
Describe the GPO logging tools used to obtain more detail about the GPO processing issues.
Explain how to back up, restore, import, and copy GPOs using the GPMC.
Explain how to build migration tables.

Module 6: Securing Windows Using Group Policy

Module Overview

This module defines the Windows security model and describes the process of using Group Policy to implement user account, computer account, and domain security.

Lessons

Exploring the Windows Security Architecture
Securing User Accounts
Exploring Security Policies
Windows Firewall with Advanced Security
Implementing Domain Security
Security Policy Options for Window Client and Windows Server

Lab Sessions

Securing Windows Using Group Policy

Lab Lessons

Using the Security Compliance Manager
Managing Auditing with a GOP
Create and Test Restricted Groups
Implement Security Templates
Creating a Windows Firewall Policy

After completing this module, students will be able to:

Describe the Windows security architecture.
Explain how to secure user accounts with Group Policy.
Explain how to harden computer accounts.
Explain how to control the domain security policy with a GPO.

Module 7: Implementing Application Security Using Group Policy

Module Overview

This module describes the process of securing applications in a Windows environment. It also explains how to implement UAC (User Account Control) to help prevent users from running unauthorized software, reducing the likelihood that viruses, Trojan horses, or spyware that might intrude upon the environment.

Lessons

Managing UAC Settings
Defending Against Malware
Using AppLocker to Restrict Software
Implementing Windows App Security Settings

Lab Sessions

Implementing Application Security Using Group Policy

Lab Lessons

Implementing UAC
Using AppLocker to Restrict Software
Configure Windows Defender with Group Policy
Windows 8.1 Client Lock Screen and App Policies

After completing this module, students will be able to:

Describe UAC.
Describe the AppLocker features.
Explain the features of Windows Apps.

Module 8: Configuring the Desktop Environment with Group Policy

Module Overview

This module explains many of the settings that are available to configure and restrict the user desktop environment, such as Control Panel restrictions, Start Menu settings, and Windows Explorer configuration.

Lessons

Exploring Script Types and Controlling Script Execution
Defining the Desktop, Start Menu, and Taskbar Settings
Defining the Control Panel Settings
Defining the Windows Components Settings
Configuring the Printer Management and Pruning Settings
Defining the Network Settings
Discovering the new Group Policy Settings

Lab Sessions

Configuring the Desktop Environment with Group Policy

Lab Lessons

Using Logon Scripts
Configuring Desktop Settings
Managing Windows Components
Configuring Printers with Group Policy
Managing Network Settings

After completing this module, students will be able to:

Describe the startup, shutdown, logon, and logoff scripts and settings.
Identify the many ways to control the user desktop, Start menu, and taskbar settings.
Explain how to restrict the Control Panel settings.
Explain how to restrict operations that users can perform in Windows Explorer, Windows Internet Explorer, and Remote Desktop Services.
Explain how to configure the printer management and pruning settings.
Describe the network settings.

Module 9: Implementing User State Virtualization

Module Overview

This module explains the different options available to maintain the user’s personal files and settings.

Lessons

Configuring Folder Redirection
Managing Offline Files
Implementing User Experience Virtualization
OneDrive for Business

Lab Sessions

Implementing User State Virtualization

Lab Lessons

Preparing for Folder Redirection,Offline Files, and UE-V
Configuring Folder Redirection
Managing Offline Files
Implementing User Experience Virtualization

After completing this module, students will be able to:

Explain how to redirect user folders to a server.
Describe the Offline Files feature.
Explain the purpose of User Experience Virtualization.
Describe the OneDrive for Business feature.

Module 10: Assigning and Publishing Software Packages

Module Overview

This module explains how to use Group Policy for deploying software.

Lessons

Using MSI Packages to Distribute Software
Using Group Policy as a Software Deployment Method
Deploying Software
Setting Up Distribution Points
Using the Systems Center Configuration Manager to Distribute Software

Lab Sessions

Assigning and Publishing Software Packages

Lab Lessons

Creating a Shared Directory Structure on a Server
Creating a Custom MSI package
Repackaging an Existing Install Package
Deploying Software Packages with a GPO

After completing this module, students will be able to:

Describe the basic elements of an MSI package.
Determine when to build or repackage your own.
Define the requirements for distributing software via Group Policy.
Describe when you might want to assign and publish software.
Explain how to upgrade and remove packages.
Explain how to set up distribution points for software deployment.
List the advantages of using SCCM to distribute software instead of Group Policy.

Module 11: Configuration Management with Windows PowerShell

Module Overview

This module explains how to navigate and use basic Windows PowerShell commands and how to use Windows PowerShell to manage Group Policy. It also explains how you can use PowerShell logon scripts with Group Policy.

Lessons

Introducing Windows PowerShell
Using Windows PowerShell
Writing PowerShell Scripts
Windows PowerShell Library for Group Policy
Windows PowerShell-Based Logon Scripts

Lab Sessions

Configuration Management with Windows PowerShell

Lab Lessons

Exploring the Windows PowerShell
Using Windows PowerShell to Manage GPOs

After completing this module, students will be able to:

Describe the Windows PowerShell features.
Explain how to perform the basic Windows PowerShell operations.
Explain how to access the Windows PowerShell library for Group Policy.
Manage systems using PowerShell commands.

Module 12: Implementing PowerShell Desired State Configuration

Module Overview

This module will describe what DSC is all about and how to implement DSC to manage systems on the network.

Lessons

Introducing Group Policy Preferences
Comparing Preferences and Policy Settings
Options for Applying Preferences
Configure Preference Settings

Lab Sessions

Using PowerShell Desired State Configuration

Lab Lessons

Write a PowerShell Desired State Configuration Script
Create a DSC
Implement DSC

After completing this module, students will be able to:

Describe the purpose of Group Policy Preferences.
Explain the differences between Preferences and Policy Settings.
Describe the Windows and Control Panel Settings.
List Advanced Preferences Configuration Options.

Module 13: Configuring Group Policy Preferences

Module Overview

This module describes the function of Group Policy Preferences. You will learn how to combine Preferences and Policies, and how Preferences are different from Policies.

Lessons

Introducing Group Policy Preferences
Comparing Preferences and Policy Settings
Options for Applying Preferences
Configuring Preferences Settings

Lab Sessions

Configuring Group Policy Preferences

Lab Lessons

Implementing Computer Preferences
Implementing User Preferences

After completing this module, students will be able to:

Describe the purpose of Group Policy Preferences.
Describe the differences between Preferences and Policy Settings.
Identify the settings that you can configure in the Computer Configuration and User Configuration sections of the Group Policy Management Console.
Describe the Windows and Control Panel settings.

Book Your Seat

Find Learning Paths

Course 20703-1-B: Administering System Center Configuration Manager

Join our community of certified professionals

About Us

ICTC is the leader in technical certification courses and exams. Our labs consist of a latest tech PCs and our instructors are certified from each vendor

Learn

View all the provided certifications and there relevant courses. Book online for a certification exam.

Contact Us

International Computer Training Center