title
Introduction to Security with Group Policy Objects and Organizational Units in Windows Server 2012

description
Info Level: Intermediate Presenter: Eli the Computer Guy Date Created: April 17, 2013 Length of Class: 26:25 Research Assistance: Tracks Windows Server 2012 Prerequisites None Purpose of Class Class Notes Organizational Units are used to Group Users and Computers together so that you can assign Security to them easily GPO's or Group Policy Objects are the actual Security Policies that will be assigned. Security and Permissions are different things. GPO's allow you to do things such as restrict the usage of Task Manager from some users regardless of which computer they log into, or to map a specific drive whenever a user logs in. Process to Create and Assign GPO's Create an Organizational Unit Move User or Computer Into OU Create GPO Assign OU to GPO Steps: Group Policy Management Right Click "Group Policy Objects" and Select "New" Give Name to GPO Click "OK" In Right hand Window Right Click new GPO and Select "Edit" Edit GPO to your needs In Left Pane Right Click your Domain Name and Select "New Organizational Unit" Give Name and Click "OK" In Left Pane Right Click new Organizational Unit and Select "Link an Existing GPO" Select GPO You want to be linked Open Active Directory Users and Computers from Server Manager dashboard Go to Users Folder Right Click the User you want to be controlled by the Organizational Unit and Select "Move" Select Organizational Unit from Folder Tree and Click "OK" Go to CLIENT Computer (Windows 8,7,Vista) Log in as User and GPO should be in Effect (If user is currently logged in, Log them Out and then back in) Corrections Lab Setup Used in Demonstration The ETCG Host Computer Specs are: ASUS Model: CM6870US01 16 GB of RAM 1 TB 7200 RPM Hard Drive i7 3.4 GHz Intel Processor VirtualBox Windows Server 2012 Machine Virtual Machine AD, DNS and DHCP have been setup Domain ETCG.com has been created Networking Configuration in VirtualBox = Internal Windows 8 Machine Virtual Machine Already a member of the Domain (Etcg.com) Networking Configuration in VirtualBox = Internal

detail
{'title': 'Introduction to Security with Group Policy Objects and Organizational Units in Windows Server 2012', 'heatmap': [{'end': 635.66, 'start': 615.635, 'weight': 0.754}, {'end': 795.292, 'start': 661.784, 'weight': 0.768}, {'end': 1031.209, 'start': 981.758, 'weight': 0.732}], 'summary': 'Provides an overview of using group policy objects and organizational units in windows server 2012 to enhance security, covering single sign-on access, permission control, internal security risks, group management, security settings, and practical application for up to 100,000 users, emphasizing cost-effectiveness and practical benefits.', 'chapters': [{'end': 301.484, 'segs': [{'end': 38.345, 'src': 'embed', 'start': 4.619, 'weight': 0, 'content': [{'end': 5.26, 'text': 'Hello again.', 'start': 4.619, 'duration': 0.641}, {'end': 7.321, 'text': "as you know, I'm Eli the Computer Guy,", 'start': 5.26, 'duration': 2.061}, {'end': 16.268, 'text': "and today's class is Introduction to Security with Group Policy Objects and Organizational Units in Windows Server 2012..", 'start': 7.321, 'duration': 8.947}, {'end': 22.934, 'text': 'So we are finally getting in to the cool stuff that we can do with Windows Server 2012.', 'start': 16.268, 'duration': 6.666}, {'end': 26.017, 'text': 'We played around with the dumb stuff before you know.', 'start': 22.934, 'duration': 3.083}, {'end': 32.101, 'text': "we've installed the operating system, we've created Active Directory, we've done DNS, we've done DHCP and woo!.", 'start': 26.017, 'duration': 6.084}, {'end': 38.345, 'text': 'And up until this point, a lot of you guys are probably sitting there going dude.', 'start': 33.323, 'duration': 5.022}], 'summary': 'Eli the computer guy introduces security with group policy objects and organizational units in windows server 2012, transitioning from basic operations to advanced functionalities.', 'duration': 33.726, 'max_score': 4.619, 'thumbnail': 'https://coursnap.oss-ap-southeast-1.aliyuncs.com/video-capture/KSTKGChQus0/pics/KSTKGChQus04619.jpg'}, {'end': 301.484, 'src': 'embed', 'start': 278.768, 'weight': 1, 'content': [{'end': 288.576, 'text': 'All that call manager employee could do was access the one or two applications that they needed in order to do their call center work.', 'start': 278.768, 'duration': 9.808}, {'end': 299.823, 'text': "So the idea here is that if you have users that you know exactly what they need to do, you can lock down all the functionality they don't need,", 'start': 288.916, 'duration': 10.907}, {'end': 301.484, 'text': "so they don't do anything stupid.", 'start': 299.823, 'duration': 1.661}], 'summary': 'Call center employees can access only necessary applications to prevent misuse.', 'duration': 22.716, 'max_score': 278.768, 'thumbnail': 'https://coursnap.oss-ap-southeast-1.aliyuncs.com/video-capture/KSTKGChQus0/pics/KSTKGChQus0278768.jpg'}], 'start': 4.619, 'title': 'Security with group policy objects', 'summary': 'Covers the significance of active directory, emphasizing group policy objects and organizational units in windows server 2012 for providing single sign-on access and controlling permissions and security for network resources and systems. it also explains how group policy objects can be used to restrict access to specific functionalities for a more secure environment.', 'chapters': [{'end': 122.825, 'start': 4.619, 'title': 'Intro to security with group policy objects', 'summary': 'Covers the significance of active directory, emphasizing group policy objects and organizational units in windows server 2012, highlighting the ability to provide single sign-on access and control permissions and security for network resources and systems.', 'duration': 118.206, 'highlights': ['Active Directory enables single sign-on access to Exchange, Outlook email, and shared folders, emphasizing the significance of Microsoft products for enterprises.', 'Group Policy Objects and Organizational Units in Windows Server 2012 allow controlling permissions and security, differentiating between network resources and actual systems.', 'Explanation of permissions as the ability to share, grant, or deny access to network resources like files, folders, and printers.']}, {'end': 301.484, 'start': 122.825, 'title': 'Using group policy objects to restrict access', 'summary': 'Explains how group policy objects can be used to restrict access to specific functionalities such as task manager for a group of users within organizational units, ensuring a more secure and controlled environment for end users.', 'duration': 178.659, 'highlights': ['Group Policy Objects (GPOs) can restrict access to functionalities like Task Manager for end users within organizational units. GPOs can be assigned to organizational units to control what users can or cannot do, such as accessing control panel, task manager, network shares, running scripts, or executable packages.', 'In a call center environment, GPOs were used to restrict access for employees, allowing them to only access necessary applications and preventing access to control panel, task manager, and drives. In a call center, employees were restricted from accessing control panel, task manager, or any drives, and were only able to access specific applications required for their call center work, ensuring a secure and controlled environment.', "GPOs help in creating a more secure and controlled environment for end users by restricting unnecessary functionalities, reducing the risk of unauthorized actions. GPOs enable administrators to lock down specific components, ensuring that end users cannot use functionalities they don't need, thereby reducing the potential for undesired actions and enhancing system security."]}], 'duration': 296.865, 'thumbnail': 'https://coursnap.oss-ap-southeast-1.aliyuncs.com/video-capture/KSTKGChQus0/pics/KSTKGChQus04619.jpg', 'highlights': ['Active Directory enables single sign-on access to Exchange, Outlook email, and shared folders, emphasizing the significance of Microsoft products for enterprises.', 'Group Policy Objects and Organizational Units in Windows Server 2012 allow controlling permissions and security, differentiating between network resources and actual systems.', 'GPOs can restrict access to functionalities like Task Manager for end users within organizational units.', 'GPOs help in creating a more secure and controlled environment for end users by restricting unnecessary functionalities, reducing the risk of unauthorized actions.']}, {'end': 832.514, 'segs': [{'end': 328.41, 'src': 'embed', 'start': 301.644, 'weight': 3, 'content': [{'end': 308.329, 'text': "Again, I know a lot of you guys think I'm kind of like brash and I'm blunt and I'm kind of mean when I talk about employees.", 'start': 301.644, 'duration': 6.685}, {'end': 313.512, 'text': "Well, I'll be honest, I am a little mean when I talk about employees because I've had employees.", 'start': 308.829, 'duration': 4.683}, {'end': 317.417, 'text': "I've had to actually pay employees out of my own pocketbook.", 'start': 313.912, 'duration': 3.505}, {'end': 321.582, 'text': 'Now you guys, as new geeks, as new technicians.', 'start': 317.697, 'duration': 3.885}, {'end': 328.41, 'text': "when you are thinking about security problems for your company, you're thinking about things like hackers.", 'start': 321.582, 'duration': 6.828}], 'summary': 'The speaker discusses being direct with employees and personal experiences with paying them, while urging new technicians to prioritize security.', 'duration': 26.766, 'max_score': 301.644, 'thumbnail': 'https://coursnap.oss-ap-southeast-1.aliyuncs.com/video-capture/KSTKGChQus0/pics/KSTKGChQus0301644.jpg'}, {'end': 423.015, 'src': 'embed', 'start': 390.524, 'weight': 2, 'content': [{'end': 398.151, 'text': "The problem is they don't know what the hell they're doing and hopefully they're only going to kill their system and they may cause a lot of damage to the rest of the network.", 'start': 390.524, 'duration': 7.627}, {'end': 412.884, 'text': "Well, what you can do with these group policy objects is you can lock down their system so that they can only do what they need to do and they can't go out and do all kinds of willy-nilly nasty stuff.", 'start': 398.711, 'duration': 14.173}, {'end': 423.015, 'text': 'Having done this for a long time now, I can tell you the main reason that help desk people have jobs in enterprises,', 'start': 414.346, 'duration': 8.669}], 'summary': 'Group policy objects can restrict system access, reducing network damage.', 'duration': 32.491, 'max_score': 390.524, 'thumbnail': 'https://coursnap.oss-ap-southeast-1.aliyuncs.com/video-capture/KSTKGChQus0/pics/KSTKGChQus0390524.jpg'}, {'end': 645.7, 'src': 'heatmap', 'start': 615.635, 'weight': 0, 'content': [{'end': 618.876, 'text': "And then we're going to go to Group Policy Management.", 'start': 615.635, 'duration': 3.241}, {'end': 623.198, 'text': 'So both of these management consoles will be here in the Tools section.', 'start': 618.916, 'duration': 4.282}, {'end': 624.879, 'text': 'And you just want to open them up.', 'start': 623.498, 'duration': 1.381}, {'end': 627.303, 'text': 'and then we can minimize server.', 'start': 625.419, 'duration': 1.884}, {'end': 635.66, 'text': 'so basically we have the group policy management and we have the active directory, users and computers.', 'start': 627.303, 'duration': 8.357}, {'end': 645.7, 'text': "So when we go to group policy management, what we're going to do is we're going to drill down and, as we can see, forestetcg.com,", 'start': 637.318, 'duration': 8.382}], 'summary': 'Using group policy management and active directory to manage forestetcg.com.', 'duration': 26.784, 'max_score': 615.635, 'thumbnail': 'https://coursnap.oss-ap-southeast-1.aliyuncs.com/video-capture/KSTKGChQus0/pics/KSTKGChQus0615635.jpg'}, {'end': 795.292, 'src': 'heatmap', 'start': 661.784, 'weight': 0.768, 'content': [{'end': 673.847, 'text': 'From here, now what we can do is we can right click on etcg.com or whatever your domain is and we can do new organizational unit.', 'start': 661.784, 'duration': 12.063}, {'end': 678.868, 'text': "So all I'm going to do here is I'm going to create a new organizational unit.", 'start': 674.807, 'duration': 4.061}, {'end': 680.369, 'text': "So I'm going to call this test.", 'start': 678.888, 'duration': 1.481}, {'end': 686.701, 'text': "oh you, so this is going to be test organizational unit and then i'm going to click ok,", 'start': 681.719, 'duration': 4.982}, {'end': 691.322, 'text': 'and now we can see here that we have this test organizational unit.', 'start': 686.701, 'duration': 4.621}, {'end': 693.783, 'text': "so at this point, that's all i want you to do.", 'start': 691.322, 'duration': 2.461}, {'end': 696.424, 'text': "so that's all it took to create an organizational unit.", 'start': 693.783, 'duration': 2.641}, {'end': 698.931, 'text': 'Yay, exciting.', 'start': 697.81, 'duration': 1.121}, {'end': 705.976, 'text': 'Now the next thing that we wanna do is we wanna go down and we want to highlight this group policy objects.', 'start': 699.511, 'duration': 6.465}, {'end': 710.88, 'text': 'So this is where we are going to create the group policy objects, these group policies.', 'start': 706.256, 'duration': 4.624}, {'end': 716.244, 'text': "What I'm gonna do is I'm gonna right click this group policy object and then I'm going to click new.", 'start': 711.18, 'duration': 5.064}, {'end': 721.448, 'text': "From here, I'm just going to give this group policy object a name.", 'start': 717.125, 'duration': 4.323}, {'end': 729.027, 'text': 'So test GPO for class.', 'start': 721.908, 'duration': 7.119}, {'end': 736.712, 'text': 'so you can call this basically whatever you want and click okay, and now we have created a group policy object.', 'start': 729.027, 'duration': 7.685}, {'end': 739.474, 'text': 'so test GPO for class now.', 'start': 736.712, 'duration': 2.762}, {'end': 741.395, 'text': 'right now, nothing has really happened.', 'start': 739.474, 'duration': 1.921}, {'end': 744.157, 'text': "we've just simply created this test GPO.", 'start': 741.395, 'duration': 2.762}, {'end': 752.242, 'text': "we've created the organizational unit, and if we walked away As far as the network would be concerned, it wouldn't matter.", 'start': 744.157, 'duration': 8.085}, {'end': 759.386, 'text': 'From here, what we want to do is we want to go in and actually set the security permissions for the organizational unit.', 'start': 752.742, 'duration': 6.644}, {'end': 765.049, 'text': "So what I'll do is I'll right click the organizational unit I want to play with, and then I want to click edit.", 'start': 759.706, 'duration': 5.343}, {'end': 769.9, 'text': 'So this is where I can go in and I can start editing things.', 'start': 766.078, 'duration': 3.822}, {'end': 772.361, 'text': "So we're not going to worry about computer configuration today.", 'start': 769.98, 'duration': 2.381}, {'end': 775.242, 'text': 'We are going to worry about the user configuration.', 'start': 772.721, 'duration': 2.521}, {'end': 781.605, 'text': 'We can open these little things up and we can see that there are a whole lot of settings in here.', 'start': 775.683, 'duration': 5.922}, {'end': 784.967, 'text': "So it's things like, look, you can have control panel.", 'start': 782.066, 'duration': 2.901}, {'end': 786.968, 'text': 'You can have folder options.', 'start': 785.367, 'duration': 1.601}, {'end': 788.609, 'text': 'You can have power options.', 'start': 787.188, 'duration': 1.421}, {'end': 789.949, 'text': 'You can have printer options.', 'start': 788.629, 'duration': 1.32}, {'end': 791.51, 'text': 'You can have devices.', 'start': 789.969, 'duration': 1.541}, {'end': 793.411, 'text': 'Well, we are going to go here.', 'start': 791.95, 'duration': 1.461}, {'end': 795.292, 'text': 'Let me, let me maximize this.', 'start': 793.431, 'duration': 1.861}], 'summary': 'Creating organizational unit, group policy objects, and setting security permissions for user configuration in a network.', 'duration': 133.508, 'max_score': 661.784, 'thumbnail': 'https://coursnap.oss-ap-southeast-1.aliyuncs.com/video-capture/KSTKGChQus0/pics/KSTKGChQus0661784.jpg'}], 'start': 301.644, 'title': 'Addressing internal security risks and managing group policy objects', 'summary': 'Emphasizes the importance of addressing internal security risks posed by employees with unrestricted computer access, highlighting potential damage. it also highlights the practical steps for managing group policy objects and emphasizes the use of groups for assigning permissions and security, aiming to ease administration.', 'chapters': [{'end': 412.884, 'start': 301.644, 'title': 'Security risks and employee access', 'summary': 'Emphasizes the importance of addressing internal security risks posed by employees with unrestricted computer access, highlighting the potential damage and the need for implementing group policy objects to restrict access and prevent harmful actions.', 'duration': 111.24, 'highlights': ['Employees with unrestricted computer access pose internal security risks, potentially causing damage to the network and systems.', "The chapter underscores the need to implement group policy objects to restrict employees' system access and prevent harmful actions.", 'The speaker expresses concern about administrative assistants or secretaries with inadequate IT knowledge and unrestricted system access potentially causing significant damage to the network.']}, {'end': 645.7, 'start': 414.346, 'title': 'Managing group policy objects', 'summary': 'Highlights the importance of group policy objects in securing systems, with 90% of issues caused by end users, and emphasizes the use of groups for assigning permissions and security, aiming to ease administration. it also demonstrates the practical steps for accessing and utilizing server manager and administrative tools for managing group policy objects.', 'duration': 231.354, 'highlights': ["Group policy objects play a crucial role in securing systems, with 90% of issues caused by end users' actions and behaviors, such as installing unauthorized software, while technical failures contribute to only 10% of the problems.", 'Emphasizing the use of groups for assigning permissions and security, the chapter recommends grouping users into larger groups to simplify administration and avoid assigning permissions or security to individual users.', 'Practical steps for accessing and utilizing Server Manager and administrative tools for managing group policy objects are demonstrated, including opening Server Manager, accessing Tools, and using Active Directory Users and Computers and Group Policy Management.', 'The chapter provides practical guidance on using Server Manager as the main dashboard for administrative tasks and demonstrates how to access essential administrative tools, such as Active Directory Users and Computers and Group Policy Management.']}, {'end': 832.514, 'start': 645.7, 'title': 'Creating organizational units and group policy objects', 'summary': 'Covers the creation of organizational units, group policy objects, and setting security permissions for the organizational unit, with a focus on user configuration settings.', 'duration': 186.814, 'highlights': ["Creating a new organizational unit named 'test' and a group policy object named 'test GPO for class'. The speaker guides the audience through the process of creating a new organizational unit and a group policy object, emphasizing the simplicity of the process.", 'Setting security permissions for the organizational unit and focusing on user configuration settings such as control panel, folder options, power options, and printer options. The speaker explains the importance of setting security permissions for the organizational unit and delves into various user configuration settings, highlighting the range of options available.', 'Exploring administrative settings including add or remove programs, printers, and regional language settings. The speaker demonstrates the multitude of administrative settings available, showcasing the variety of configurations that can be managed within the system.']}], 'duration': 530.87, 'thumbnail': 'https://coursnap.oss-ap-southeast-1.aliyuncs.com/video-capture/KSTKGChQus0/pics/KSTKGChQus0301644.jpg', 'highlights': ['Employees with unrestricted computer access pose internal security risks, potentially causing damage to the network and systems.', "Group policy objects play a crucial role in securing systems, with 90% of issues caused by end users' actions and behaviors.", 'Practical steps for accessing and utilizing Server Manager and administrative tools for managing group policy objects are demonstrated.', 'Emphasizing the use of groups for assigning permissions and security, the chapter recommends grouping users into larger groups to simplify administration.']}, {'end': 1274.335, 'segs': [{'end': 1031.209, 'src': 'heatmap', 'start': 971.39, 'weight': 4, 'content': [{'end': 973.594, 'text': 'So the test GPO for class.', 'start': 971.39, 'duration': 2.204}, {'end': 977.216, 'text': "Now what I'm going to do is I'm going to exit out of this.", 'start': 974.554, 'duration': 2.662}, {'end': 981.758, 'text': 'So, simply by setting that to enabled and setting it to okay,', 'start': 977.556, 'duration': 4.202}, {'end': 990.484, 'text': "now anybody who's affected by this group policy object will not be able to get to their task manager.", 'start': 981.758, 'duration': 8.726}, {'end': 993.886, 'text': 'So we created the group policy object.', 'start': 991.905, 'duration': 1.981}, {'end': 1001.831, 'text': 'Now, the next thing that we need to do is we need to link the organizational unit to that group policy object.', 'start': 994.306, 'duration': 7.525}, {'end': 1010.396, 'text': "So what we're going to do is we're going to highlight test OU, the test organizational unit, and then we're going to do select an existing GPO.", 'start': 1002.151, 'duration': 8.245}, {'end': 1016.9, 'text': "So we're going to select that and then we're going to go and we are going to select the test GPO for class.", 'start': 1010.416, 'duration': 6.484}, {'end': 1021.823, 'text': 'So we create the group policy object, then we link it to the organizational unit.', 'start': 1017.18, 'duration': 4.643}, {'end': 1031.209, 'text': "and now we're going to click okay, so the test GPO is now linked to the test organizational unit.", 'start': 1022.083, 'duration': 9.126}], 'summary': 'Created and linked test gpo to organizational unit for restricting task manager access.', 'duration': 45.51, 'max_score': 971.39, 'thumbnail': 'https://coursnap.oss-ap-southeast-1.aliyuncs.com/video-capture/KSTKGChQus0/pics/KSTKGChQus0971390.jpg'}, {'end': 1090.693, 'src': 'embed', 'start': 1060.732, 'weight': 3, 'content': [{'end': 1063.976, 'text': 'And as you can see, I can get to task manager right now.', 'start': 1060.732, 'duration': 3.244}, {'end': 1067.319, 'text': 'So user two can, in fact, get to task manager.', 'start': 1064.056, 'duration': 3.263}, {'end': 1068.801, 'text': 'I have just proved that to you.', 'start': 1067.339, 'duration': 1.462}, {'end': 1072.363, 'text': "Now what I'm going to do is I'm going to go back to the server.", 'start': 1069.341, 'duration': 3.022}, {'end': 1077.426, 'text': "So we've now done everything we need to do in this group policy management.", 'start': 1073.083, 'duration': 4.343}, {'end': 1079.527, 'text': "So we're going to minimize this right now.", 'start': 1077.446, 'duration': 2.081}, {'end': 1081.328, 'text': 'Close that out.', 'start': 1080.707, 'duration': 0.621}, {'end': 1086.931, 'text': 'Now we are going to be in active directory users and computers.', 'start': 1082.008, 'duration': 4.923}, {'end': 1090.693, 'text': 'So you should be pretty used to this particular management console right now.', 'start': 1087.051, 'duration': 3.642}], 'summary': 'User demonstrated accessing task manager and server settings, followed by managing group policy and active directory.', 'duration': 29.961, 'max_score': 1060.732, 'thumbnail': 'https://coursnap.oss-ap-southeast-1.aliyuncs.com/video-capture/KSTKGChQus0/pics/KSTKGChQus01060732.jpg'}, {'end': 1134.3, 'src': 'embed', 'start': 1106.599, 'weight': 0, 'content': [{'end': 1110.48, 'text': 'make sure to do a refresh so it actually shows up here.', 'start': 1106.599, 'duration': 3.881}, {'end': 1117.632, 'text': 'so this is the organizational unit and as you can see from the right hand side here, nobody is in the organizational unit, Yeah.', 'start': 1110.48, 'duration': 7.152}, {'end': 1124.916, 'text': "So what we're going to do is we're going to go to users and we are going to go down and we are going to highlight user two.", 'start': 1118.112, 'duration': 6.804}, {'end': 1127.017, 'text': 'So poor little user two.', 'start': 1125.216, 'duration': 1.801}, {'end': 1129.598, 'text': 'User two is the one that I just keep smacking down.', 'start': 1127.217, 'duration': 2.381}, {'end': 1131.039, 'text': "I don't like user two.", 'start': 1129.718, 'duration': 1.321}, {'end': 1134.3, 'text': 'User two gave me the stink eye the first day he got hired.', 'start': 1131.459, 'duration': 2.841}], 'summary': 'Organizational unit has no users. user two is highlighted and discussed negatively.', 'duration': 27.701, 'max_score': 1106.599, 'thumbnail': 'https://coursnap.oss-ap-southeast-1.aliyuncs.com/video-capture/KSTKGChQus0/pics/KSTKGChQus01106599.jpg'}], 'start': 833.055, 'title': 'Group policy objects and security', 'summary': 'Discusses the significance of refining group policy objects for creating security in enterprise environments, highlighting the range of settings available for security configurations, and explains how to manage group policy objects and organizational units, illustrating the impact of group policy on user access and the need for user log out and log in for policy changes to take effect.', 'chapters': [{'end': 901.705, 'start': 833.055, 'title': 'Group policy objects security', 'summary': 'Discusses the significance of refining group policy objects for creating security in enterprise environments and the professionals dedicated to perfecting group policies, highlighting the range of settings available for security configurations.', 'duration': 68.65, 'highlights': ['The significant importance of refining group policy objects for creating security in enterprise environments and the professionals dedicated to perfecting group policies, highlighting the range of settings available for security configurations.', 'The extensive range of settings available for security configurations within group policy objects, showcasing the depth of refinement and customization possible in enterprise environments.', 'The role of professionals dedicated to perfecting group policies for every single user and office in enterprise environments, indicating the level of specialization and focus on security configurations.']}, {'end': 1274.335, 'start': 901.705, 'title': 'Managing group policy objects and organizational units', 'summary': 'Explains how to create and link a group policy object to an organizational unit, assign users to the unit, and enforce policies, illustrated with an example of removing access to task manager for a user, demonstrating the impact of group policy on user access and the need for user log out and log in for policy changes to take effect.', 'duration': 372.63, 'highlights': ["The impact of group policy on user access is demonstrated by removing access to Task Manager for a user. By enabling the 'remove task manager' setting in the group policy object, access to the task manager is restricted for users affected by the policy.", "The need for user log out and log in for policy changes to take effect is emphasized. After applying the group policy, user log out and log in are required for the new settings to be applied, as demonstrated by the user's access to Task Manager being restricted only after logging out and logging back in.", 'The process of creating and linking a group policy object to an organizational unit and assigning users to the unit is explained. The steps involve creating a group policy object, linking it to an organizational unit, and assigning users to the unit, demonstrating the comprehensive process of implementing and enforcing group policies.']}], 'duration': 441.28, 'thumbnail': 'https://coursnap.oss-ap-southeast-1.aliyuncs.com/video-capture/KSTKGChQus0/pics/KSTKGChQus0833055.jpg', 'highlights': ['The extensive range of settings available for security configurations within group policy objects, showcasing the depth of refinement and customization possible in enterprise environments.', 'The significant importance of refining group policy objects for creating security in enterprise environments and the professionals dedicated to perfecting group policies, highlighting the range of settings available for security configurations.', 'The role of professionals dedicated to perfecting group policies for every single user and office in enterprise environments, indicating the level of specialization and focus on security configurations.', 'The process of creating and linking a group policy object to an organizational unit and assigning users to the unit is explained, demonstrating the comprehensive process of implementing and enforcing group policies.', 'The impact of group policy on user access is demonstrated by removing access to Task Manager for a user, showcasing the practical application of group policy settings.', 'The need for user log out and log in for policy changes to take effect is emphasized, highlighting the requirement for user action to apply new settings.']}, {'end': 1577.203, 'segs': [{'end': 1339.108, 'src': 'embed', 'start': 1274.815, 'weight': 1, 'content': [{'end': 1278.497, 'text': "That's what these group policy objects allow you to do.", 'start': 1274.815, 'duration': 3.682}, {'end': 1295.069, 'text': 'And the organizational units are basically like a container so that you can put users into the organizational units and then you can assign group policies to the organizational units and all the users that are inside there have the same group policies.', 'start': 1278.798, 'duration': 16.271}, {'end': 1302.697, 'text': 'Again. so if you have 1,000 employees at a call center, you can put all those 1,000 employees into one organizational unit,', 'start': 1295.109, 'duration': 7.588}, {'end': 1310.306, 'text': 'create a group policy for that organizational unit and now all 1,000 employees have the same group policy.', 'start': 1302.697, 'duration': 7.609}, {'end': 1313.169, 'text': 'I know you guys are new.', 'start': 1311.807, 'duration': 1.362}, {'end': 1318.214, 'text': 'I know when you guys think about networks, you guys are thinking about like 10 people or 20 people in a network.', 'start': 1313.349, 'duration': 4.865}, {'end': 1324.3, 'text': 'What makes this stuff powerful is imagine when you have 1,000, 10,000, 100,000 people in a network and you can make one simple configuration change,', 'start': 1318.454, 'duration': 5.846}, {'end': 1330.005, 'text': 'and that affects all of them.', 'start': 1328.144, 'duration': 1.861}, {'end': 1332.125, 'text': "That's what makes this stuff so powerful.", 'start': 1330.445, 'duration': 1.68}, {'end': 1336.327, 'text': "So we're probably going to have another class or two on group policy objects.", 'start': 1332.345, 'duration': 3.982}, {'end': 1339.108, 'text': "We're definitely going to be talking more about organizational units.", 'start': 1336.347, 'duration': 2.761}], 'summary': 'Group policy objects and organizational units enable easy management of policies for large employee groups, with potential for scalability to thousands or more.', 'duration': 64.293, 'max_score': 1274.815, 'thumbnail': 'https://coursnap.oss-ap-southeast-1.aliyuncs.com/video-capture/KSTKGChQus0/pics/KSTKGChQus01274815.jpg'}, {'end': 1549.379, 'src': 'embed', 'start': 1507.09, 'weight': 0, 'content': [{'end': 1510.772, 'text': 'most likely you are not using any of these GPOs at all.', 'start': 1507.09, 'duration': 3.682}, {'end': 1514.835, 'text': 'So if you go in and you start using group policy objects,', 'start': 1511.212, 'duration': 3.623}, {'end': 1525.663, 'text': 'these are the types of things that your bosses will notice and will be very impressed with and might give you a raise or at least give you a nice little pat on the head.', 'start': 1514.835, 'duration': 10.828}, {'end': 1534.489, 'text': "I mean if you're not in a really big enterprise environment already, you're in a small environment 20 computers, 100 computers.", 'start': 1526.323, 'duration': 8.166}, {'end': 1538.352, 'text': "there's a good chance you're not using GPOs and these organizational units.", 'start': 1534.489, 'duration': 3.863}, {'end': 1546.317, 'text': "So if you're the administrator and you go in and you start using these again, this is the type of thing that end users and the bosses,", 'start': 1538.832, 'duration': 7.485}, {'end': 1549.379, 'text': 'the C-level executives, will notice immediately.', 'start': 1546.317, 'duration': 3.062}], 'summary': 'Implementing gpos can impress bosses and benefit small environments with 20-100 computers.', 'duration': 42.289, 'max_score': 1507.09, 'thumbnail': 'https://coursnap.oss-ap-southeast-1.aliyuncs.com/video-capture/KSTKGChQus0/pics/KSTKGChQus01507090.jpg'}], 'start': 1274.815, 'title': 'Group policy objects and windows server 2012', 'summary': 'Introduces group policy objects and organizational units, emphasizing the ability to assign group policies to large numbers of users, up to 100,000, and the importance of hands-on practice. it also highlights the significance of learning windows server 2012, emphasizing its cost-effectiveness and potential to impress bosses and improve support calls by utilizing group policy objects.', 'chapters': [{'end': 1427.959, 'start': 1274.815, 'title': 'Introduction to group policy objects', 'summary': 'Introduces group policy objects and organizational units, highlighting the ability to assign group policies to large numbers of users, up to 100,000, and the importance of hands-on practice in mastering this complex skill set.', 'duration': 153.144, 'highlights': ['The power of group policy objects lies in the ability to make one simple configuration change that affects all users, making it possible to assign group policies to large numbers of users, up to 100,000.', 'The importance of hands-on practice in mastering group policy objects is emphasized, with the suggestion to experiment in a lab environment and utilize online resources for specific configurations.', 'Organizational units serve as containers to group users and assign group policies, enabling all users within an organizational unit to have the same group policies, such as locking down computers and sites.']}, {'end': 1577.203, 'start': 1427.959, 'title': 'Introduction to windows server 2012', 'summary': 'Introduces the importance of learning windows server 2012, emphasizing its cost-effectiveness compared to formal training and its potential to impress bosses and improve support calls by utilizing group policy objects.', 'duration': 149.244, 'highlights': ['Learning Windows Server 2012 can save thousands of dollars compared to formal training, making it a cost-effective investment in books worth a hundred or two hundred bucks.', 'Implementing Group Policy Objects can impress bosses and potentially lead to a raise or recognition, especially in smaller organizations with limited GPO utilization.', "Utilizing Group Policy Objects can lower overall support calls by preventing the installation of unnecessary software, making the administrator's job easier."]}], 'duration': 302.388, 'thumbnail': 'https://coursnap.oss-ap-southeast-1.aliyuncs.com/video-capture/KSTKGChQus0/pics/KSTKGChQus01274815.jpg', 'highlights': ['The power of group policy objects lies in the ability to make one simple configuration change that affects all users, making it possible to assign group policies to large numbers of users, up to 100,000.', 'Learning Windows Server 2012 can save thousands of dollars compared to formal training, making it a cost-effective investment in books worth a hundred or two hundred bucks.', 'The importance of hands-on practice in mastering group policy objects is emphasized, with the suggestion to experiment in a lab environment and utilize online resources for specific configurations.', 'Implementing Group Policy Objects can impress bosses and potentially lead to a raise or recognition, especially in smaller organizations with limited GPO utilization.', 'Organizational units serve as containers to group users and assign group policies, enabling all users within an organizational unit to have the same group policies, such as locking down computers and sites.', "Utilizing Group Policy Objects can lower overall support calls by preventing the installation of unnecessary software, making the administrator's job easier."]}], 'highlights': ['Group Policy Objects and Organizational Units in Windows Server 2012 allow controlling permissions and security, differentiating between network resources and actual systems.', 'GPOs can restrict access to functionalities like Task Manager for end users within organizational units.', 'GPOs help in creating a more secure and controlled environment for end users by restricting unnecessary functionalities, reducing the risk of unauthorized actions.', "Group policy objects play a crucial role in securing systems, with 90% of issues caused by end users' actions and behaviors.", 'Practical steps for accessing and utilizing Server Manager and administrative tools for managing group policy objects are demonstrated.', 'Emphasizing the use of groups for assigning permissions and security, the chapter recommends grouping users into larger groups to simplify administration.', 'The extensive range of settings available for security configurations within group policy objects, showcasing the depth of refinement and customization possible in enterprise environments.', 'The significant importance of refining group policy objects for creating security in enterprise environments and the professionals dedicated to perfecting group policies, highlighting the range of settings available for security configurations.', 'The role of professionals dedicated to perfecting group policies for every single user and office in enterprise environments, indicating the level of specialization and focus on security configurations.', 'The process of creating and linking a group policy object to an organizational unit and assigning users to the unit is explained, demonstrating the comprehensive process of implementing and enforcing group policies.', 'The impact of group policy on user access is demonstrated by removing access to Task Manager for a user, showcasing the practical application of group policy settings.', 'The need for user log out and log in for policy changes to take effect is emphasized, highlighting the requirement for user action to apply new settings.', 'The power of group policy objects lies in the ability to make one simple configuration change that affects all users, making it possible to assign group policies to large numbers of users, up to 100,000.', 'Learning Windows Server 2012 can save thousands of dollars compared to formal training, making it a cost-effective investment in books worth a hundred or two hundred bucks.', 'The importance of hands-on practice in mastering group policy objects is emphasized, with the suggestion to experiment in a lab environment and utilize online resources for specific configurations.', 'Implementing Group Policy Objects can impress bosses and potentially lead to a raise or recognition, especially in smaller organizations with limited GPO utilization.', 'Organizational units serve as containers to group users and assign group policies, enabling all users within an organizational unit to have the same group policies, such as locking down computers and sites.', "Utilizing Group Policy Objects can lower overall support calls by preventing the installation of unnecessary software, making the administrator's job easier."]}