GPO FundamentalsGroup Policy & Endpoint Policy

Group Policy Objects

What is a Group policy object? A virtual group of policy settings is called a Group Policy Object (GPO). A GPO has a distinctive name, like a GUID (globally unique identifier). GPOs can be created like any other active directory object and are linked to a Site, domain, or OU in which the policy settings have to be applied. GPO settings are evaluated by clients using the hierarchical nature of…
Read more
AD Domain ServicesDirectory Objects & Identity Data

Active Directory (AD) Computer Object

SAMAccountName: This is also a naming attribute that is used to uniquely identify a computer object in the network. It is the pre-Windows 2000 logon name of an object. ObjectCategory: It includes the distinguished name of the object class to which the computer object belongs or the name of one of its superclasses. ObjectClass: It contains the distinguished name of the object class to which…
Read more
AD Domain ServicesDirectory Objects & Identity Data

Active Directory Nested Groups Explained

What you will learn: Nesting groups in Active Directory (AD) allow for better control in managing access to resources in the AD network. Group nesting also makes it easier to assign permissions across multiple domains and greatly reduces the hassle for IT administrators. However, the process of nesting groups can quickly get confusing owing to the various types of groups in AD and their scope.
Read more
AD Domain ServicesDirectory Objects & Identity Data

AD Group object properties – Security tab

The security tab of the group properties window is of high importance because it allows you to configure access permissions on the group object. The security tab allows you to grant or deny permissions to other groups and users over the group object. In the “group or user names” section you can choose the group or the user to whom you would like to deny or allow permission. You…
Read more
AD Domain ServicesDirectory Objects & Identity Data

AD Group object properties

Members tab The Members tab displays the name of all users and groups that are members of the group. The add buttons and remove buttons can be used to add or remove users or groups from this list. MemberOf tab The MemberOf tab displays all the groups in which the group holds membership. ManagedBy tab The Managedby tab displays the contact details of the user who manages…
Read more
AD Domain ServicesDirectory Objects & Identity Data

Active Directory User properties – Sessions tab

The sessions tab of the user properties window allows you to configure the timeout and reconnection settings for a user. End a disconnected session– Allows you to configure the duration after which a disconnected session should be ended.Active session limit– allows you to configure the duration after which an active session should be endedIdle session limit– allows…
Read more