Skor ako sa pustime do samotnych Active Directory GPO, by som rad pripomenul, ze na kazdom pocitaci od Windows 2000 su Local Group Policy. Jedna sa o lokalne politiky. Ku tymto lokalnym politikam sa dostaneme spustenim prikazu gpedit.msc. Ked si spustime dany prikaz na pocitaci uvidime nasledovnu obrazovku:
Coraz viac zistujem, ze lokalni administratori vo firmach nerozumeju GPO a preto ich nepouzivaju. A ked ich aj pouzivaju, tak im vacsina aj tak nerozumie. Preto som sa rozhodol o napisanie serialu o GPO politikach a spravit tak osvetu v tomto smere.
Tak mi drzte palec. Dufam, ze sa bude pacit.
———
Obsah serialu:
#1 GPO Serial – Lokalne Politiky
#2 GPO Serial – GPO v domene cast 1.
#3 GPO Serial – GPO v domene cast 2.
#4 GPO Serial – Aplikovanie GPO
Once upon the time I was at customer which had all infrastructure servers (and also all domain controllers) in VMWare VM. He decided to have one more domain controller on physical server. Only server he could use was management server, which was full of management tools.
These days I’m working on one RDS (Terminal Services before) farm and I’m playing with setting users’ environment as secure as possible, but also as usefull as possible. When I disabled access to Control Panel for all users with settings in GPO I found one issue. When I right-clicked on Desktop under normal user I could see following options:
Today I went to one of our customers and they were complaining about not being able to access admin shares on their clients’ computers. Admin shares are those following:
Recent Comments