Win 5

Reply needed 1

Discuss some of the benefits and disadvantages of using group policy in an organization.

 

Group policy provides organizations with a number of advantages. It allows the administrator to assign group policy in domains, sites, and organizational units. The group policy settings apply to all users and computers in a domain, site, and OU. This means that if you want all users and computers in a domain to have the same background, screen saver, login message, and password policies, then group policy can make this possible. The administrator also has the ability to change and rewrite group policy settings at will. Group policy can reduce the workload of the administrator in many areas, and can be used to totally define the working environment on computers and the network. Group policy settings set the standard for rules and conduct on the network and work computers.

Despite the positives, there are disadvantages to group policy as well. It can be challenging and overwhelming to organize multiple GPO’s on a large network. Ironically, this can increase the burden on the administrator and it is possible to lose track of which policies apply to which groups and OUs. There also really isn’t a “one size fits all” across the board solution for group policy. Some group policy settings may work well on one network, and then work poorly on another network. Group policy may also be configured incorrectly (and not realized) by the administrators which makes it ineffective. Group policy is a good solution for organizations and provides many useful features, but network admins need a good understanding to really make it effective.

 

References:

 

Williams, Matt. (2012). Group Policy Not the Only Way to Manage User Activity. Retrieved from: http://www.faronics.com/news/blog/group-policy-not-the-only-way-to-manage-user-activity/

Tech FAQ. (2014). Group Policy. Retrieved from: http://www.tech-faq.com/group-policy.html

Reply needed 2

Benefits

·

· A Group Policy Object (GPO) can be created that defines registry-based policies, software installation and maintenance options, folder redirection options, script options, and security options.

· AppLocker Group Policy can be used to prevent users from accessing or installing software or using software that is restricted by the policy. Application usage can also be monitored using AppLocker events.

· According to Microsoft (2012), "In Windows Server 2012 R2, when Group Policy gets the latest version of a policy from the domain controller, it writes that policy to a local store. Then if Group Policy is running in synchronous mode the next time the computer reboots, it reads the most recently downloaded version of the policy from the local store, instead of downloading it from the network. This reduces the time it takes to process the policy".

· Remote GP update

· Fast Start-up

· Group Policy settings in Internet Explorer 10 and Group Policy preferences for Internet Explorer 10

Disadvantages

· Policies may take 2-3 reboots before they're able to apply successfully on a workstation

· Despite the name, Group Policy can only be applied to users and computers, and not groups.

· If you're attempting to push a GPO to user(s), you may run into issues if they are not placed in the appropriate container or have the wrong GPO settings applied to them.

References

Microsoft. (2012). Monitor Application Usage with AppLocker. Retrieved from https://technet.microsoft.com/en-us/library/hh994604(v=ws.11).aspx

Microsoft. (2014). What's New in Group Policy in Windows Server. Retrieved from https://technet.microsoft.com/en-us/library/dn265973(v=ws.11).aspx

Reply needed 3

AppLocker is most often used in the federal government and multiple other agencies and organizations to enforce rules on what applications are allowed to be used by a user, which users are allowed to install software, what versions of a software are allowed, and how licensed applications are controlled. AppLocker allows an administrator to specify which users can run specific applications and is accessed through group policy. Additionally, an administrator can control the types of executable files such as Windows Installer files and DLL files. This is important to assist in reducing and managing computing resources more efficiently by decreasing the number of help desk calls from users running applications that are disallowed. If set up inappropriately by an administrator, certain users may be able to access applications that others cannot, users may be able to access what they shouldn't, and applications that aren't restricted may be restricted accidentally by blocking certain file extensions.

References

Microsoft. (2014). Windows AppLocker. Retrieved from https://technet.microsoft.com/en-us/library/dd759117(v=ws.11).aspx