Exercise 1 Disabling and Deleting a GPO In this exercise, you disable and delete a GPO link.

Scenario Contoso Ltd. has determined that users need access to the Search utility to perform their jobs. You will disable the GPO and then delete the link. Disable the GPO link. Log on to DEN-CL1 as ___________. Open the Group Policy Management console and expand the domain. Right-click the Remove Search GPO and click _____________ to remove the checkmark. Notice the arrow on the link icon becomes dimmed. Delete the GPO link. Right-click the Remove Search GPO and click Delete. Read the warning message in the Group Policy Management dialog box and click __________. Open Run and type ______ to refresh the policy.

1.

2.

3.

4.

5.

6.

7.

8.

9.

Open the Group Policy Objects container. Has the Remove Search policy been deleted?

Exercise 2 Creating and Linking Multiple GPOs Scenario To limit the number of calls to the help desk, Contoso, Ltd., has decided to remove the Run command from the Start menu for all domain users and to remove access to Control Panel to users in the Sales OU and the Graphics OU. You will create and link the GPOs to accomplish this. 1.Create and link a GPO to the domain. 2. In Group Policy Management, right-click the ______. 3.Create and link a GPO called Remove Run Command. 4. Edit the _____. 5. Expand User Configuration, Administrative Templates, Start Menu and __________ folder, Enable the Remove Run menu from the Start Menu setting. 6.Create and link a GPO to the Sales OU and the Graphics OU that prohibits access to Control Panel. 7.Right click the Sales OU.

Click ____________ to remove the check mark. This will disable inheritance blocking for the Sales OU. 9. Create and link a GPO to the Sales OU called Remove _____________. 10. Edit the policy. 11. Expand ___________, Administrative Templates, Control Panel folder, locate and Enable the Prohibit access to the Control Panel setting. 12. Right-click the Graphics OU and click Link an Existing GPO. 13. In the Select GPO dialog box, click the Remove Control Panel GPO and click __________. 14. Determine which OUs the Remove Control Panel GPO is linked to. 15. Expand the Group Policy Objects folder and click the Remove Control Panel GPO. 16. In the right pane, on the Scope tab, look under the Location heading. 17. Test the setting as the sales manager. 18. Log on to DEN-CL1 as Don with the password of _____________. 19. Click the Start menu. Ensure that the Run command has been removed from the __________ menu. Ensure that Control Panel does not appear on the Start menu.
8.

Exercise 3 Filtering the GPOs to Exempt Selected Users In this exercise, you will filter the GPO permissions to exempt selected users. Scenario It has been determined that the domain administrators need access to the Run command. You will filter permissions to exempt the domain administrators from the Remove Run Command GPO. It has also been determined that the sales managers need access to Control Panel. You will filter permissions to exempt the sales managers from the Remove Control Panel GPO.

1.

Filter permissions on the Remove Run Command GPO to exempt domain administrators. Log on to DEN-CL1 as _____________. Open ____________________and expand\ the domain. Click the Remove Run Command GPO. In the right pane, click the Delegation tab Click ___________.

2. 3.

4. 5. 6.

7.

In the Remove Run Command Security Settings dialog box, select Domain Admins and check the box to Deny the Apply Group Policy permission. Click OK and click ___________ after reading the Security warning message. Log off and then log on again to DEN-CL1 as ________. Click the Start menu. The Run command should be on the Start menu. Filter permissions on the Remove Control Panel GPO to exempt the sales managers. Switch to the _______________ console and expand the Sales OU. Click the Remove Control Panel GPO. In the right pane, click the Delegation tab. Click _______________ In the Remove Control Panel Security Settings dialog box, click Add. Type G Sales Managers and click OK. Deny the Apply Group Policy permission to G Sales Managers

8.

9.

10.

11.

12.

13. 14. 15. 16.

17. 18.

19. 20.

Click OK and click Yes at the security message. Log on as Don with the password of ______________. Click the Start menu. Ensure that Control Panel appears and that the Run command does not appear on the Start menu.

21.

Exercise 4 Backing Up and Importing GPO Settings In this exercise, you will back up and import GPO settings. Scenario Another organizational unit needs a similar GPO configuration as the Remove Control Panel GPO. You will back up the Remove Control Panel GPO and then import the settings into a new GPO. 1.Back up the Remove Control Panel GPO. 2. Log on to DEN-CL1 as Administrator 3. Open the ____________ console and expand the domain.

Click the Group Policy Objects folder. 5. Right-click the Remove Control Panel GPO and click ____________. 6. In the Backup Group Policy Object dialog box, ensure that C:\GPO Backup is the location. 7. Click Back Up and then click _____________. 8. Import the settings into a new GPO named Imported. 9. Right-click the Group Policy Objects container, create a new policy called Imported and click OK. 10. Right-click the _________ GPO and click Import Settings. 11. In the Import Settings __________- click Next. 12. On the Backup GPO page, click Next. 13. On the _____________ page, ensure that the location is set to C:\GPO backup and click Next. 14. On the Source GPO page, select the Remove Control Panel GPO and click Next. 15. On the Scanning Backup page, click Next. 16. Read the summary and click Finish. Click OK after the import is complete. 17. Edit the Imported GPO to see that the settings were imported correctly.
4.