Pop Quiz
Pop Quiz: Reusing Security Settings in Windows 7
Applies to the "Designing Client Configurations" objective of Exam 70-686: Windows 7, Enterprise Desktop Administrator.
Q: A company's Windows 7 IT security team has configured a desktop computer with all settings required to comply with the corporate security policy. The team needs to provide the Active Directory team with a template of these settings that can be applied to many Windows 7 desktop computers using Group Policy. Which step does the security team need to take first to create a template of settings for the Active Directory team?
- Import policy
- Export policy
- Gpupdate /force
- Create a new GPO
Answer and explanation is below.
Answer is B: The security team needs to export the policy on the desktop computer using the Local Security Policy console, and deliver the .inf template file to the Active Directory team, who needs to import the settings using the Group Policy Management Console (GPMC) into a Group Policy Object (GPO).
Quick Tip: Desktop administrators can then use Gpupdate /force on the computers to update and apply the new security settings immediately.
References:
Bonus Question: Which tools does Microsoft provide that allow administrators to migrate user profiles? (Tweet your answer with #pop686c and get a chance to win a rare MCPmag.com baseball cap! Deadline for entries is Monday, Dec. 17.)
Answer to bonus question from last time: Microsoft allows IT teams to deploy customized and branded copies of Internet Explorer using the Internet Explorer Administration Kit (IEAK) which is also a free download from Microsoft.com.
About the Author
Andy Barkl, CCNP, CCDP, CISSP, MCT, MVP, MCDST, MCSE: Security, MCSA: Security, MCSA: Messaging A+, CTT+, i-Net+, Network+, Security+, Server+, CNA, has over 20 years of experience in the IT field. He's the owner of MCT & Associates LLC, a technical training and consulting firm in Phoenix, Arizona. He enjoys dividing his time between teaching in the classroom, writing from his office and consulting on Cisco and Windows deployments. He's also the online editor for MCPMag.com, TCPMag.com, CertCities.com, and a contributing author and editor for Sybex and Cisco Press. He hosts a multitude of exam preparation chats monthly on MCPmag.com and CertCities.com.