Thursday, February 16, 2012

Group policy for any client is Window Server 2008 r2


Group policy is a collection of different types of policies which are responsible for that what a user machine. Means by using working process of the uses in the work group & in the domain environment.

Password policy in industry software changing password 30 days .Networking changing password 90 days. So it will automatically msg to change password. In simple sentence (It is a set of role & instructions)

-- > How to define password policy?

1>    Create a OU and move user in that OU.open group policy management from the adjustment tool.
2>    Expand your forest console.
3>    Expand local server e.g. – royalshampe.com.
4>    Now right click on the desired OU & choice option create a GPO in this domain and link it here now click ok.
5>    Give suitable name to the policy e.g. – (royal520hackers) policy for any department & click ok.
6>    Now right click your policy name & select option edit.
7>    Expand computer configuration\policies console\window setting\account policy.
8>    Now select password policy .Now configures policy according to your requirements.
a>    Enforce password history – 0 to 24  days
b>    Maximum password age --  1 to999 days
c>    Minimum password age  -- 1 to 998 days


9> After successfully creating password policy close group policy, Management editor & again right click on the O.U and click on enforce policy & apply ok.

-- > How to create same wallpaper policy?
1> Right click on the O.U & create a GPO (Group Policy Object) in the domain & after that right click on policy.
2>Now expand user’s configuration and expand administrative template now expand desktop option and select desktop.
3> In the right hand enable desktop wallpaper & type shared folder path of wallpaper format (\\server name\folder\file name)

-- > How to define software restriction policy?

1> Right click on the policy name & edit.
2>Now expand computer control now expand policy\window security setting\software restriction policy.
3> Right click on it and new software restriction policy.
4> Right click on additional rule.
5> Now browse expand your drive & expand program files.
6> Point to I explorer select it and open.
7> Now choice security disable apply ok & close.
8> And go to run and write gpedit \force
          9> Select hash rule in administrator rule after group policy.

Twitter Delicious Facebook Digg Stumbleupon Favorites More