Donate Us : paypal.me/MicrosoftLab
Most popular group policies for organization
1. Prepare
- DC31 : Domain Controller(Yi.vn) | DC32 : Domain Member | WIN101, WIN102 : Clients
2. Step by step : Settings most popular group policies for organization via GPO ### -------------******************** Youtube.com/c/MicrosoftLab ********************-------------------- ###
- DC31 : Settings most popular group policies for organization via GPO
+ Create and sharing a picture with path \\DC31\IM\Vegeta.jpg
+ Server Manager - Tools - Group Policy Management - Yi.vn :
+ For 'Default Domain Policy' - Right-Click 'Default Domain Policy' - Edit ... :
1.1 Set Password Policy
+ Computer Configuration - Polices - Windows Settings - Security Settings - Account Policies - Password Policy : Set depend your Organizarion
1.2 Settings account lockout policy
+ Computer Configuration - Policies - Windows Settings - Security Settings - Account Policies - Account lockout policy :
+ Account lockout duration : 30 minutes + Account lockout threshold : 3 invalid logon attempts + Reset account lockout counter affter : 30 minutes (depend your Organizarion)
1.3 Settings machine will locked after inactive time
+ Computer Configuration - Policies - Windows Settings - Security Settings - Local Policies - Security Options - Interactive logon : Machine inactivity limit :
+ Tick "Define this policy settings" + Machine will be locked after : 900 seconds (depend your Organizarion)
2.2 Disable Forced System Restart
+ Right-click 'Group Policy Objects' - New : 'Disable Forced System Restarts' - Right-click 'Disable Forced System Restarts' - Edit... - Computer Configuration - Policies
- Administrative Templates - Windows Component - Windows Update - Double-click 'No auto-restart with logged on users for scheduled automatic updates installations' : Enable - OK
2.3 Restrict Software Installations
+ Right-click 'Group Policy Objects' - New : 'Restrict Software Installations' - Double-click 'Restrict Software Installations' - Edit... - Computer Configuration - Policies
- Administrative Templates - Windows Component - Windows Installer - Double-click 'Prohibit User Install' : Enable - OK
2.5 Prevent USB
+ Right-click 'Group Policy Objects' - New 'Prevent USB' - Right-Click 'Prevent USB' - Edit... - Computer Configuration - Policies - Administrative Templates
- System - Removeable Storage Access - All Removeable Storage class : Deny all access - Enable
2.6 Add member to local Administrators group
+ Right-click 'Group Policy Objects' - New : Add to Local Administrators - Right-click 'Add to Local Administrators' : Edit... - Computer Configuration - Polices - Windows Setting
- Security Settings - Right-click "Restricted Groups" - Add Group... - Administrators : + Members of this group - Add... - Browse... - HiepIT;Domain admins - OK
2.7 Set Proxy for Browsers
+ Right-click 'Group Policy Objects' - New 'Site01 Proxy' - Right-click 'Site01 Proxy' - Edit... - User Configuration - Preferences - Control Panel settings
- Right-click Internet Settings - New - Internet Explorer 10 - Connections - LAN settings... :
+ Select "Use a proxy server for your LAN (These settings will not apply to dial-up or VPN connections)" + Address : 10.0.0.200 ( press F6 to green) (IP of Proxy Server)
+ Port : 8080 + Select : Bypass proxy server for local addresses ( press F6 to green)
+ Policies - Administrative Templates - Windows components - Internet Explorer - Prevent changing proxy settings : Enable
2.8 Set Wallpaper for client
+ Right-click 'Group Policy Objects' - New 'Wallpaper Clients' - Right-Click 'Wallpaper Clients' - Edit... - User Configuration - Policies - Administrative Templates
- Desktop - Desktop - Desktop Wallpaper :
+ Enable + Wallpaper name : \\DC31\IM\Vegeta.jpg + Wallpaper stype : Center - OK
+ Linked to OUs that you want
+ Link (2.2, 2.5, 2.6) to Servers OU + Link (2.3, 2.5, 2.6, 2.7, 2.8) to Clients OU + Link (2.1, 2.3, 2.5, 2.6, 2.8) to Guests OU
+ Start - run - cmd, type : gpupdate /force
- DC32(belong Servers OU), WIN101(belong Clients OU), WIN102(belong Guests OU) : Update policies and check
