tailieunhanh - Group Policy Objects phần 1

Group Policy Objects Starting with Windows NT , Microsoft introduced System Policy, a mechanism for using the registry to "lock down" specific portions of user desktops to prevent users from tweaking the configuration | Group Policy Objects Starting with Windows NT Microsoft introduced System Policy a mechanism for using the registry to lock down specific portions of user desktops to prevent users from tweaking the configuration. System Policy was a significant step forward in centralized administration. However it didn t completely address most enterprise issues related to reducing the Total Cost of Ownership TCO such as Software distribution Configuration management Security management Because of this Microsoft continued its research and developed Group Policy Objects GPOs which starting with Windows 2000 have replaced System Policy. Note Group Policy is implemented only on Windows 2000 and later. Windows NT doesn t support the storage or processing GPOs. However Windows 2000 and its successors can process the old-style Windows NT System Policies such as when a user logs on to a Windows NT domain from a computer running Windows 2000 Windows XP or Windows Server 2003. A local GPO exists on every workstation or server running Windows 2000 Windows XP or Windows Server 2003. By default a local GPO is stored in the folder SystemJRooi System32 GroupPolicy. The local GPO is a standalone object you must manage it on each computer running Windows 2000 or later using the MMC Group Policy snap-in. Except for its prominence on individual computers Group Policy shows its power in the AD infrastructure. For example some of the GPO capabilities available in an AD-based domain environment centralized software deployment folder redirection etc. are not available on local GPOs. For GPOs to fulfill their real promise it is necessary to deploy Active Directory and start migrating all workstations and servers to Windows 2000 or later. One of the key features in Microsoft s Change and Configuration Management CCM strategy is the ability to use AD as a kind of application repository. For example in AD infrastructure you can advertise applications such as Word Excel or .