Module 7: Troubleshooting Group Policy, Schemes and Mind Maps of Art

When the Group Policy update completes, close the Command Prompt window. Notice that the Notepad shortcut now displays on the desktop. Note.

Typology: Schemes and Mind Maps

2022/2023

Uploaded on 03/01/2023

koss
koss 🇺🇸

4.8

(16)

242 documents

1 / 8

Toggle sidebar

This page cannot be seen from the preview

Don't miss anything!

bg1
Module 7: Troubleshooting Group Policy
Lab A: Troubleshooting Issues with Group Policy Application
(VMs: 10982D-LON-DC1, 10982D-LON-CL1, 10982D-LON-CL2)
Exercise 1: Working with GPOs
Task 1: Use the GPMC
1. On LON-DC1, in the Server Manager console, click the Tools menu, and then
click Group Policy Management.
2. Expand Forest: Adatum.com, expand Domains, and then click Adatum.com.
3. Click the Linked Group Policy Objects tab. Notice that the Default Domain
Policy GPO links to the root of the Adatum.com domain.
4. Right-click Adatum.com, and then click Create a GPO in this domain, and Link
it here.
5. In the New GPO dialog box, in the Name text box, type Preferences and then
click OK.
6. In the left pane, expand Adatum.com.
7. Click Preferences.
8. Click OK to close the warning pop-up window.
9. On the Scope tab, verify that no WMI filters are applied.
10. On the Settings tab, verify that no settings are defined in this GPO.
11. In the left pane, right-click Preferences.
12. In the context menu, click Edit.
13. In the Group Policy Management Editor window, under User Configuration,
expand Preferences, expand Windows Settings, and then select Shortcuts.
14. Right-click Shortcuts, point to New, and then click Shortcut.
15. In the New Shortcut Properties dialog box, enter the following information,
and then click OK:
o Action: Create
o Name: Notepad
o Target type: File System Object
o Location: Desktop
o Target Path: C:\Windows\System32\notepad.exe
16. Close the Group Policy Management Editor.
17. Close the Group Policy Management Console.
pf3
pf4
pf5
pf8

Partial preview of the text

Download Module 7: Troubleshooting Group Policy and more Schemes and Mind Maps Art in PDF only on Docsity!

Module 7: Troubleshooting Group Policy

Lab A: Troubleshooting Issues with Group Policy Application

(VMs: 10982D-LON-DC1, 10982D-LON-CL1, 10982D-LON-CL2)

Exercise 1: Working with GPOs

Task 1: Use the GPMC

  1. On LON-DC1 , in the Server Manager console, click the Tools menu, and then click Group Policy Management.
  2. Expand Forest: Adatum.com , expand Domains , and then click Adatum.com.
  3. Click the Linked Group Policy Objects tab. Notice that the Default Domain Policy GPO links to the root of the Adatum.com domain.
  4. Right-click Adatum.com , and then click Create a GPO in this domain, and Link it here.
  5. In the New GPO dialog box, in the Name text box, type Preferences and then click OK.
  6. In the left pane, expand Adatum.com.
  7. Click Preferences.
  8. Click OK to close the warning pop-up window.
  9. On the Scope tab, verify that no WMI filters are applied.
  10. On the Settings tab, verify that no settings are defined in this GPO.
  11. In the left pane, right-click Preferences.
  12. In the context menu, click Edit.
  13. In the Group Policy Management Editor window, under User Configuration , expand Preferences , expand Windows Settings , and then select Shortcuts.
  14. Right-click Shortcuts , point to New , and then click Shortcut.
  15. In the New Shortcut Properties dialog box, enter the following information, and then click OK : o Action: Create o Name: Notepad o Target type: File System Object o Location: Desktop o Target Path: C:\Windows\System32\notepad.exe
  16. Close the Group Policy Management Editor.
  17. Close the Group Policy Management Console.
  1. Switch to LON-CL.
  2. Right-click Start , and then click Windows PowerShell (Admin).
  3. In the Windows PowerShell Command Prompt window, at the command prompt, type the following command, and then press Enter: gpupdate /force
  4. When the Group Policy update completes, close the Command Prompt window. Notice that the Notepad shortcut now displays on the desktop. Note that the shortcut might appear earlier.

Results : After completing this exercise, you will have worked with GPOs.

Exercise 2: Resolving Group Policy Application (1)

Task 1: Read the help-desk Incident Record for incident 743219

  • Read the help-desk Incident Record 743219 in the Student Handbook exercise scenario.

Task 2: Update the Plan of Action section

  1. Read the Additional Information section of the Incident Record in the Student Handbook’s exercise scenario.
  2. Update the Plan of Action section of the Incident Record with your recommendations.

Task 3: Attempt to resolve the problem

  1. On LON-CL2 , verify that the desktop shortcut for the Research application is not present.
  2. Switch to the LON-DC1 computer.
  3. Click Tools and then click Active Directory Users and Computers.
  4. In Active Directory Users and Computers, expand Adatum.com , and then click Computers.
  5. Right-click LON-CL2 , and then click Move.
  6. In the Move window, expand Research , click Lab , and then click OK.
  7. Close Active Directory Users and Computers.
  8. Switch to LON-CL.
  9. Right-click Start , point to Shut down or sign out , and then click Restart.
  10. On LON-CL2 , sign back in by using the following credentials: o User name: Administrator o Password: Pa55w.rd

applying the new policy. o Run the gpupdate command to view the error.

Task 3: Simulate the problem

  1. Switch to LON-CL.
  2. Run the D:\Labfiles\Mod07\Scenario1.vbs script.
  3. Wait while LON-CL1 restarts. Task 4: Attempt to resolve the problem
  4. Switch to the LON-CL1 computer.
  5. Sign in by using the following credentials: o User name: Adatum\Administrator o Password: Pa55w.rd
  6. Right-click Start , and then click Windows PowerShell (Admin).
  7. At the Windows PowerShell (Admin) command prompt, type the following command, and then press Enter: gpupdate /force
  8. Notice that Group Policy fails to update.
  9. Close the Windows PowerShell window.
  10. Open File Explorer , right-click This PC , and then click Properties.
  11. In the System Properties dialog box, in the Computer name, domain, and workgroup settings section, click Change settings.
  12. In the System Properties dialog box, on the Computer Name tab, click Change.
  13. In the Computer Name/Domain Changes dialog box, click Workgroup.
  14. In the Workgroup text box, type TEMP and then click OK.
  15. To acknowledge the warning, click OK.
  16. To clear the welcome message, click OK.
  17. To clear the message about restarting, click OK.
  18. In the System Properties dialog box, on the Computer Name tab, click Change.
  19. In the Computer Name/Domain Changes dialog box, click Domain.
  20. In the Domain text box, type Adatum.com and then click OK.
  21. In the Windows Security window, sign in as Administrator by using the password Pa55w.rd.
  22. To clear the welcome message, click OK.
  23. To clear the message about restarting, click OK.
  24. In the System Properties dialog box, click Close , and then click Restart Now.
  1. Sign back in by using the following credentials: o User name: Adatum\Adam o Password: Pa55w.rd
  2. Verify that you can refresh GPOs: o Right-click Start. o Click Windows PowerShell (Admin). o In the User Account Control dialog box, sign in as Administrator by using the password of Pa55w.rd. o At the Windows PowerShell command prompt, type the following command, and then press Enter: gpupdate /force
  3. Sign out from LON-CL.
  4. Update the Resolution section of the Incident Record: o Ran GPUpdate , and saw error related to processing for computer account. o Group Policy event log indicated that account information could not be retrieved. o The System event log had a NETLOGON error indicating that the computer password might be a problem. o Rejoined the domain and the problem is now resolved. The user was signing in with cached credentials.

Results : After completing this exercise, you will have resolved GPO application issues successfully.

Exercise 4: Resolving Group Policy Application (3)

Task 1: Read the help-desk Incident Record for incident 741138

  • Read the help-desk Incident Record 741138 in the Student Handbook’s Exercise Scenario.

Task 2: Update the Plan of Action section

  1. Read the Additional Information section of the Incident Record in the Student Handbook’s Exercise Scenario.
  2. Update the Plan of Action section of the Incident Record with your recommendations.

Task 3: Attempt to resolve the problem

  1. On LON-CL1 , sign in by using the following credentials:

Lab B: Resolving Issues with Group Policy

Exercise 1: Resolving Group Policy Application (4)

Task 1: Read the help-desk Incident Record for incident 742812

  • Read the help-desk Incident Record 742812 in the Student Handbook’s exercise scenario.

Task 2: Update the Plan of Action section

  1. Read the Additional Information section of the Incident Record in the Student Handbook’s exercise scenario.
  2. Update the Plan of Action section of the Incident Record with your recommendations.

Task 3: Attempt to resolve the problem

  1. On LON-CL1 , sign in by using the following credentials: o User name: Art o Password: Pa55w.rd o Domain: Adatum
  2. Verify that Recycle Bin is on the desktop. Policy should be configured so that the Recycle Bin is not present on the desktop.
  3. Right-click Start , and then click Windows PowerShell.
  4. In the Windows PowerShell Command Prompt window, at the command prompt, type the following command, and then press Enter: gpupdate /force
  5. Verify that Recycle Bin displays on the desktop.
  6. Switch to the LON-DC1 computer.
  7. Open Server Manager, click Tools , and then click Group Policy Management. If there is a Group Policy Management dialog box that indicates loading is occurring, click the Close (X) button. Close the Group Policy Management Console, and then reopen it from the Tools menu.
  8. In Group Policy Management, expand Forest:Adatum.com , expand Domains , expand Adatum.com , and then click the Managers OU.
  9. In the list of Linked Group Policy Objects, click the down arrow so that GPO-B displays above GPO-A.
  10. Close the Group Policy Management Console.
  11. Switch to LON-CL.
  1. In the Command Prompt window, at the command prompt, type the following command, and then press Enter: gpupdate /force
  2. Restart LON-CL.
  3. Sign back in by using the following credentials: o User name: Art o Password: Pa55w.rd o Domain: Adatum
  4. Verify that the Recycle Bin no longer displays on the desktop. If the Recycle Bin is present, repeat steps 12, 13, and 14. You may need to repeat these steps several times.
  5. Update the Resolution section of the Incident Record in the Student Handbook: o Recycle Bin no longer displays on the desktop. o Changed GPO application settings so that policies now apply in a different order.

Results : After completing this exercise, you will have resolved GPO application issues successfully.

Prepare for the next module When you have finished the lab, revert the virtual machines to their initial state.

  1. On the host computer, start Hyper-V Manager.
  2. In the Virtual Machines list, right-click 10982D-LON-CL1 , and then click Revert.
  3. In the Revert Virtual Machine dialog box, click Revert.
  4. Repeat steps 2 and 3 for 10982D-LON-DC1 and 10982D-LON-CL.