Shulou(Shulou.com)06/02 Report--

Brief introduction to the Application of SERVER 2012 R2 Domain Policy

I. the hierarchical relationship of the domain

Understanding: there are mainly three important objects in the domain structure (domain, OU, user and computer), and they present a top-down hierarchical relationship in the domain environment.

II. Introduction of domain objects

As the top-level object in the domain structure, a domain is like a company, which contains department (OU) and department employees (users and computers), and multiple OU can be established in a domain, and users and computers can be moved to different OU according to the actual situation.

One thing needs to be clear: computers exist in the domain's Computer container by default after joining the domain. We can move the computers in the Computer container to the specified OU as needed, of course, there is no need to move, and keep the default. The movement of this location is only related to whether the domain policy belongs to the computer policy. If you do not plan to assign the domain to the computer policy, you do not have to move the location. At present, I do not move, but use the user policy (that is, to bind the policy to the login domain user account, and all the policies are set based on the account number. The computer on which the account is logged in will apply the policy to the computer on which it is logged in)

Third, domain policy application logic

Domain policy establishment path:

Server Manager-tools-Group Policy Management

Enter the Group Policy Manager to see the OU and policy objects established under the current domain

Policy can be established based on domain or a certain OU, which is related to the scope of application of the strategy. At present, we will take the establishment of policy based on OU as a follow-up introduction.

The option to "create a GPO link in this domain" appears when you right-click on the OU where you want to establish a policy, as shown in the figure:

Click "create GPO Link" and fill in the corresponding link name to open the Group Policy Editing Manager that we are familiar with in a stand-alone environment.

We can see two grouping policies in the Group Policy Management Editor: computer configuration and user configuration.

These two sets of policies are roughly the same in terms of policy configuration (there must be some differences, of course). Computer configuration is mainly aimed at a set of policies that computers take effect, and user configuration is a set of policies for user accounts. these two sets of policies correspond to the users and computer objects in the domain that we talked about earlier, where computer configuration mainly acts on computer objects, while user configuration acts on user objects.

Fourth, the view of policy objects

After completing the group policy settings, we can select the corresponding policies in the group policy management interface, and then click the "Settings" tab on the right to display each policy set.

Computers join the domain

The prerequisite for a computer to join a domain requires that DNS be set to the domain control server IP (usually, the domain control server and the DNS server are on the same server) so that the local computer can resolve the domain name properly.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.