Intro to Group Policy Managing account policies Application

Intro to Group Policy Managing account policies

Application of Group Policy • GPOs can apply a variety of configuration options to the – Local computer – Site – Domain – OU • Main categories to a Group Policy: – Computer Configuration – User Configuration

Controlling User Desktop Settings • Group Policy – Helps reduce administrative costs by allowing the administrator to • Enforce standard computer configurations • Limit user access to various areas of the operating system • Ensure that users have their own personal desktop and application settings • Administrative templates – Consist of several categories of configuration settings

Configuration categories of administrative templates

Configuring Account Policies • Account Policies node – Found under the computer configuration category of a GPO – Includes three subcategories • Password Policy • Account Lockout Policy • Kerberos Policy • Password Policy node – Contains configuration settings for the password’s • History • Length • Complexity

Password policies in Windows Server 2008

Configuring Account Policies (Continued) • Account Lockout Policy node – Contains configuration settings for • Password lockout threshold and duration • Reset options

Account Lockout Policies

Configuring Account Policies (Continued) • Kerberos Policy node – Contains configuration settings for • Kerberos ticket-granting ticket (TGT) • Session ticket lifetimes and time stamp

Kerberos policy node configuration