01-07-2009, 10:30 AM
|
#1 (permalink)
|
Member
Join Date: Jan 2009
Posts: 67
|
Group Policy Feature Set in Windows Server 2008
Group Policy Feature Set in Windows Server 2008
The Group Policy Feature set is the collection of all the available settings within a group policy. The available policy settings are created from the basic policy template, which contains the general hierarchy, the local security policy, and the default administrative templates stored in the local file system. The administrative templates that present their settings within a policy are referenced from the files stored in the c:\windows\policydefinitions folder or in the Active Directory domain central store.
The policy settings available within a particular policy or all policies can be extended by importing additional administrative templates. This can be accomplished by simply adding the correct ADMX and ADML files to the PolicyDefinitions folder on the local system or in the central store or by importing a legacy administrative template file with the ADM (Administrative Templates) extension into a particular policy.
By default, the Windows Server 2008 group policies include approximately 1,300 settings in the Computer Configuration node and another 1,300 in the User Configuration node. This, of course, makes detailing each of the settings a very inconvenient and lengthy process.
Many of the policy settings contained in both the Computer and User Configuration policy nodes apply only to specific Windows Server 2008 role services such as the Encrypting File System, Terminal Services, Network Access Protection, or the Distributed File System role services. For these particular services, as with any Group Policy settings, it is very important that the administrator understands the potential impact of configuring any of these settings. Before any production group policies are created, modified, or linked, the policy should be tested in an isolated environment and a rollback plan should be created and also tested.
|
|
|
Linear Mode
