15. You want to create a new group policy but do not wish to inherit.

15. You want to create a new group policy but do not wish to inherit.

Ans: Make sure you check Block inheritance among the options when creating the policy.

14. Where is secedit?

14. Where is secedit?

Ans: It’s now gpupdate.

13. How frequently is the client policy refreshed?

13. How frequently is the client policy refreshed?

Ans: 90 minutes give or take.

12. MSI file is not available

12.You need to automatically install an app, but MSI file is not available. What do you do?

Ans. A .zap text file can be used to add applications using the Software Installer, rather than the Windows Installer.

11.Restrict running applications on a machine

11. How can you restrict running certain applications on a machine?

Ans: Via group policy, security settings for the group, then Software Restriction Policies.

10. Conf.adm

10. What’s contained in administrative template conf.adm?

Ans: Microsoft NetMeeting policies.

9. Remote Installation

9.You want to set up remote installation procedure, but do not want the user to gain access over it. What do you do?

Ans: gponame–> User Configuration–> Windows Settings–> Remote Installation Services–> Choice Options is your friend.

8. Group Policy

8. You change the group policies, and now the computer and user settings are in conflict. Which one has the highest priority?

Ans: The computer settings take priority.

7. Where is GPT stored?

7. Where is GPT stored?

Ans: %SystemRoot%\SYSVOL\sysvol\domainname\Policies\GUID.

6. What is GPT and GPC?

What is GPT and GPC?

Ans : Group policy template and group policy container.

5. Where are group policies stored?

Where are group policies stored?

Ans : %SystemRoot%System32\GroupPolicy

4. Why doesn’t LSDOU work under Windows NT?

Why doesn’t LSDOU work under Windows NT?

Ans :  If the  NTConfig.pol file exist, it has the highest priority among the numerous policies.

3. What is LSDOU?

What is LSDOU?

Ans : It’s group policy inheritance model, where the policies are applied to Local machines, Sites, Domains and Organizational Units.

2. I am trying to create a new universal user group. Why can’t I?

I am trying to create a new universal user group. Why can’t I?

Ans: Universal groups are allowed only in native-mode Windows Server 2003 environments. Native mode requires that all domain controllers be promoted to Windows Server 2003 Active Directory.

1.What’s the difference between local, global and universal groups?

What’s the difference between local, global and universal groups?

Ans : Domain local groups assign access permissions to global domain groups for local domain resources. Global groups provide access to resources in other trusted domains. Universal groups grant access to resources in all trusted domains.