AD Lab Doc

Lab Documentation

By Todd McMullan

Creating and Using Starter GPO’s

On the Server in the GPMC create the following Starter GPO by right clicking Starter GPO and selecting new.

Right click the new Starter GPO and enable the following in the new Starter GPO.

In the GPMC create a new GPO in the Group Policy Objects using the new Starter GPO. Verify that the enabled objects are still enabled in the new GPO

Create a new Starter GPO reflecting the following. Create a new GPO in Group Policy

Objects using the new Starter GPO.

Demonstrating GPO Inheritance Blocking

On the Server create a new GPO in the CPMC under the Group Policy Objects using The

StartMenuU Starter GPO. Enable the following and Link it to the Marketing OU.

Log on to the domain as salesperson1. View the results. On the server in the GPMC right click

Sales OU and click Block Inheritance. View the results on the client

Demonstrating GPO Enforcement

On the Server in the GPMC in the Group Policy Objects create a new GPO as follows. Link it as follows. Right click it and enforce it. Block the

Inheritance for the Sales OU

Verify that it work on the Client computer by logging into the domain as salesperson1.