First, the group policy is not what you think it is. If you move from Windows NT 4.0 environment to Windows Server 2003 environments, you should know in advance that the group policy is not the same as Windows NT System Policy. Windows NT System Policy is very limited and does not, frankly, even in the same area of Group Policy. If you have worked with Windows 2000 or later versions of the Windows operating system, you can do already have seen something of what Group Policy can not and knew or heard of someone falsely accused political groups for their problems.
The simple truth is that Group Policy does what it says it does. You manage policy by using Group Policy settings. A policy is an adjustment that is applied individually how to access the Run dialog box. Most of the political attitudes has three basic states:
- Enabled The policy setting is enabled and their settings are active. Generally allow a policy setting to ensure that it is enforced. Once activated, some policy settings you can set additional options, such as the exact policy setting is applied to configure.
- Off The setting is disabled and does not apply your settings. Typically, you disable a policy function to make sure that it is not true.
- Not Configured The policy setting is not used. No policy settings are active or inactive, and perform any changes to the configuration settings by policy. In themselves, these states are fairly straightforward. However, some people think that Group Policy is complex, since these basic conditions can be influenced by heredity and blocking (we play briefly and discussed in detail in Chapter 3). Keep these two rules for inheritance and blocks in the head, and you’ll be well on your way to success for group policies:
- If inherited policy settings are applied strictly, can not replace the inherited policy setting is set up independently of the state policy in the current GPO.
- If inherited policy settings are locked in the current GPO and not strictly enforced, overriding the inherited policy settings of the inherited policy setting does not apply, and only the current setting of the policy GPO is applied.