YouTube Icon

Interview Questions.

Top 100+ Group Policy Interview Questions And Answers - May 30, 2020

fluid

Top 100+ Group Policy Interview Questions And Answers

Question 1. Why Should We Use Group Policy?

Answer :

For deploying software program
We can follow safety
For controlling Users environment, settings, in line with computer settings
To control desktop environment (To standardize surroundings)
To adjust the registry
Question 2. What Is Group Policy Object?

Answer :

We name the actual unit that we're growing, deleting, handling, working with is called Group Policy item.

Group Policy items have two components:

Group Policy box
Group Policy template
Active Directory Interview Questions
Question three. What Is Group Policy Container?

Answer :

It is the box in the Active Directory in which the Group Policy may be applied. (i.E., both Organizational unit or Domain or Site)

Question four. What Is Group Policy Template?

Answer :

When you create a group policy box robotically a template could be created within the hard pressure, in sysvol folder of the Domain Controller that is called Group Policy template.

Windows 10 Tutorial
Question five. Where Is Group Policy Template Stored?

Answer :

Group Policy template saved in sysvol folder.

Windows Administration Interview Questions
Question 6. How To Create A Group Policy?

Answer :

Start –>Programs –>Administrative equipment ->Active Directory Users and computers ->Right click on on the box on which you need to apply Group Policy->Select homes-> Click on Group Policy tab->Click on New

Question 7. What Are The Steps Do We Have When We Are Creating Group Policy?

Answer :

There are two steps, one is growing Group policy and linking to the box. Generally we create the group coverage at container simplest so when you click on on New it creates and links the GPO to that field at a time. Suppose if you want to hyperlink a set policy item to a box which is already created click on on Add select the institution coverage.

Windows 10 Development Tutorial DHCP Interview Questions
Question eight. What Are The Buttons Available On Group Policy Tab In Properties Of A Container?

Answer :

New (Creates new GPO)
Add (hyperlinks a GPO to this field which has created already)
Edit (Edits the existing GPO)
Delete Deletes the GPO
Options (right here you get the following test packing containers): (i) No override – Prevent different GPO from overriding policy set on this one; and(ii) Disabled – This GPO isn't always relevant to this box
Properties
Note: When you're deleting a GPO it asks  things:

Remove the hyperlink from this list
Remove the link and delete the GPO permanently
Question nine. What Is No Override Option In Gpo?

Answer :

Generally the regulations set at one stage can be overridden in different level, so if don’t need to override this policy beneath the sub levels of this one you could set this.

Ex: If you set No override at Domain degree then that GPO could be carried out thru out the Domain, despite the fact that you have got the identical coverage otherwise at OU level.

SCCM Interview Questions
Question 10. What Is Block Inheritance Of Gpo And Where It Is?

Answer :

The Block inheritance GPO option blocks the institution rules inheriting from the pinnacle stage, and takes impact of this gift GPO.

Right click on on the field –> click on on Group Policy –ègo to residences >on the bottom of the General tab you may discover Block inheritance test container

Ex: If you pick Block inheritance at OU stage then no coverage from the Domain stage, or Site degree or local coverage will now not applied to this OU.

Question eleven. You Have Set The No Override Option At Domain Level And Block Inheritance At Ou Level. Which Policy Will Take Effect?

Answer :

If you have set each then No override wins over the Block inheritance. So No override will take impact.

Dns Server Interview Questions
Question 12. What Are The Options That Are Available When You Click On Option Button On General Tab?

Answer :

General
Disable computer configuration settings (The settings the ones are set under pc configuration of this GPO will now not take impact.)
Disable person configuration settings (The settings the ones are set under User configuration of this GPO will no longer take impact.)
Links (Displays the bins which have links to this GPO)
Security (With security option you could set level of permissions and settings to the character users and businesses. Ex: If you want to disable this GPO to a selected consumer on this container, on safety tab pick that user and pick out the deny check container for follow the Group Policy. Then the GPO will no longer take impact to that user despite the fact that he is in that box.)
Active Directory Interview Questions
Question thirteen. What Will You See In The Group Policy Snap In?

Answer :

You will see  main quantities, and under those you've got sub quantities, they're:

Computer Configuration
Software settings
Software installations
Windows settings
Administrative templates
User configuration
Software settings
Software installations
Windows settings
Administrative templates
Note: Administrative templates are for editing the registry of windows 2000 clients.

Question 14. What Is The Hierarchy Of Group Policy?

Answer :

Local coverage
Site Policy
Domain Policy
OU Policy
Sub OU Policy (If any are there)
Question 15. Who Can Create Site Level Group Policy?

Answer :

Enterprise Admin

Windows Troubleshooting Interview Questions
Question sixteen. Who Can Create Domain Level Group Policy?

Answer :

Domain Admin

Question 17. Who Can Create Organizational Unit Lever Group Policy?

Answer :

Domain Admin

Question 18. Who Can Create Local Group Policy?

Answer :

Local Administrator or Domain Administrator

Windows Administration Interview Questions
Question 19. What Is The Refresh Interval For Group Policy?

Answer :

Refresh c language for Domain Controllers is 5 minutes, and the refresh interval for all other computer systems within the community is forty five minutes (this one doubt).

Question 20. Why Do We Need To Manage And Control Desktop Environment?

Answer :

To decrease support time
Eliminate capability for troubles
One preferred environment to support
Eliminate distractions
To increase productivity
Question 21. What Is Group Policy Loop Back Process? How To Set It?

Answer :

Start –>programs –>Administrative equipment –>Active Directory users and computers –>Right click on the box –>click on on Group coverage tab –>Click on edit –>click on on Computer settings –>click on Administrative templates –>gadget –>Group policy –>click on User institution coverage loop lower back processing mode –> click OK –> Select enable

Question 22. What Are The Players That Are Involved In Deploying Software?

Answer :

Group Policy: Within GP we specify that this software application gets mounted to this specific laptop or to this unique person.
Active Directory: Group Policy will be implemented someplace in Active Directory.
Microsoft Installer service
Windows installer packages: The type of bundle that may be used by Group Policy to set up programs is .Msi programs i.E., Microsoft Installer packages.
Question 23. What Is The Package That Can Be Used To Deploy Software Through Group Policy?

Answer :

Windows installer packages (.Msi files)

Question 24. What Is Microsoft Installer Service?

Answer :

Microsoft Installer Service runs on the patron machines within the Windows 2000 domain. It installs the minimum quantity of an utility, as you extend functionality it installs the closing a part of utility. It is chargeable for installing software inside the purchaser. It is also responsible for editing, upgrading, applying provider packs.

DHCP Interview Questions
Question 25. What Is Local Security Policy, Domain Security Policy, And Domain Controller Security Policy In The Administrative Tools?

Answer :

Local Security coverage: This is group policy applied to neighborhood device
Domain Security Policy: Group Policy implemented at domain level
Domain Controller Security Policy: Group Policy carried out at area controller level.
Question 26. What Are The Design Considerations For Group Policy?

Answer :

The following should be considered for designing organization rules:

Minimize linking: Because there may be a chance deleting the unique one with seeing who else are the usage of this GPO. Minimizing linking for simplicity.
Minimum range of GPO’s: Microsoft indicates that one GPO with one hundred settings will manner quicker than 100 GPO’s each with one setting. This is for performance.
Delegate
Minimize filtering: To keep simple your surroundings, try and reduce filtering.
If you've got extra wide variety of GPO’s for a container, whatever GPO is on top might be applied first. If you need, you can pass GPO’s up and down.

If there may be battle among two GPO’s of equal field, the final implemented GPO may be effective. I.E., the lowest one could be effective.

Question 27. What Is Group Policy In Active Directory ? What Are Group Policy Objects (gpos)?

Answer :

Group Policy gadgets, aside from the neighborhood Group Policy object, are virtual items. The coverage setting facts of a GPO is truely saved in  locations: the Group Policy field and the Group Policy template.

The Group Policy box is an Active Directory box that shops GPO residences, inclusive of information on model, GPO status, and a listing of additives that have settings in the GPO.

The Group Policy template is a folder structure inside the document machine that shops Administrative Template-primarily based regulations, security settings, script documents, and statistics regarding programs which are to be had for Group Policy Software Installation.

The Group Policy template is located within the machine quantity folder (Sysvol) inside the Policies subfolder for its domain.

SCCM Interview Questions
Question 28. What Is The Order In Which Gpos Are Applied ?

Answer :

Group Policy settings are processed inside the following order:

Local Group Policy object : Each laptop has precisely one Group Policy object that is stored locally. This processes for both pc and consumer Group Policy processing.
Site : Any GPOs which have been related to the website that the computer belongs to are processed next. Processing is in the order this is designated by using the administrator, on the Linked Group Policy Objects tab for the website online in Group Policy Management Console (GPMC). The GPO with the lowest link order is processed remaining, and consequently has the highest priority.
Domain: Processing of multiple area-connected GPOs is within the order particular by using the administrator, on the Linked Group Policy Objects tab for the domain in GPMC. The GPO with the bottom link order is processed final, and therefore has the highest priority.
Organizational gadgets : GPOs which can be linked to the organizational unit this is highest inside the Active Directory hierarchy are processed first, then POs which are connected to its child organizational unit, and so on. Finally, the GPOs which are related to the organizational unit that contains the person or laptop are processed.
At the level of every organizational unit inside the Active Directory hierarchy, one, many, or no GPOs may be related. If numerous GPOs are linked to an organizational unit, their processing is inside the order that is detailed with the aid of the administrator, on the Linked Group Policy Objects tab for the organizational unit in GPMC.

The GPO with the bottom hyperlink order is processed closing, and consequently has the highest precedence.

This order approach that the local GPO is processed first, and GPOs that are linked to the organizational unit of which the laptop or consumer is a direct member are processed closing, which overwrites settings in the sooner GPOs if there are conflicts. (If there aren't any conflicts, then the sooner and later settings are merely aggregated.)

Question 29. How To Backup/restore Group Policy Objects ?

Answer :

Begin the method through logging on to a Windows Server 2008 area controller, and establishing the Group Policy Management console. Now, navigate through information pane have to display all the organization policy objects which can be associated with the area. In Figure A there are simplest two group policy gadgets, however in a production surroundings you can have many extra. The Group Policy Objects box shops all of the organization coverage gadgets for the area.
Now, proper-click on on the Group Policy Objects field, and choose the Back Up All command from the shortcut menu. When you do, Windows will open the Back Up Group Policy Object dialog box.
As you may see in Figure B, this conversation box calls for you to provide the direction to which you want to keep the backup documents. You can either shop the backups in a dedicated folder on a local drive, or you may location them in a folder on a mapped network pressure. The conversation field also carries a Description discipline that you could use to provide an outline of the backup which you are creating.
You must provide the route to that you want to shop your backup of the institution coverage objects.
To initiate the backup process, simply click the Back Up button. When the backup system completes, you need to see a conversation container that tells you how many group coverage items were successfully backed up. Click OK to shut the conversation box, and you’re all executed.
When it comes to restoring a backup of any Group Policy Object, you have  alternatives. The first choice is to proper-click on the Group Policy Object, and choose the Restore From Backup command from the shortcut menu. When you do that, Windows will take away all the character settings from the Group Policy Object, and then put into effect the settings observed inside the backup.
Your different alternative is to proper-click on at the Group Policy Object you need to repair, and choose the Import Settings alternative. This option works extra like a merge than a restore.
Any settings that presently live inside the Group Policy Object are retained except there's a contradictory settings in the report this is being imported.
Question 30. You Want To Standardize The Desktop Environments (wallpaper, My Documents, Start Menu, Printers Etc.) On The Computers In One Department. How Would You Do That?

Answer :

Go to Start->packages->Administrative equipment->Active Directory Users and Computers
Right Click on Domain->click on on preoperties
On New home windows Click on Group Policy
Select Default Policy->click on Edit
on group Policy console
visit User Configuration->Administrative Template->Start menu and Taskbar.
Select each property you want to adjust and do the equal.
Question 31. What Is The Difference Between Software Publishing And Assigning?

Answer :

Assign Users :The software program utility is advertised while the consumer logs on. It is established while the person clicks at the software utility icon through the begin menu, or accesses a record that has been associated with the software software.

Assign Computers :The software program application is advertised and hooked up when it's far secure to do so, along with when the computer is subsequent restarted.

Publish to users : The software program application does not appear at the start menu or desktop. This approach the user may not know that the software is available. The software program software is made available through the Add/Remove Programs option in control panel, or with the aid of clicking on a report that has been associated with the application. Published programs do now not reinstall themselves inside the occasion of accidental deletion, and it is not possible to submit to computers.

Question 32. What Are Administrative Templates?

Answer :

Administrative Templates are a feature of Group Policy, a Microsoft technology for centralised control of machines and users in an Active Directory surroundings. Administrative Templates facilitate the control of registry-primarily based coverage. An ADM record is used to describe both the user interface presented to the Group Policy administrator and the registry keys that should be updated on the target machines.

An ADM document is a text file with a selected syntax which describes each the interface and the registry values so that it will be changed if the policy is enabled or disabled.

ADM documents are fed on via the Group Policy Object Editor (GPEdit). Windows XP Service Pack 2 shipped with five ADM documents (machine.Adm, inetres.Adm, wmplayer.Adm, conf.Adm and wuau.Adm). These are merged right into a unified “namespace” in GPEdit and provided to the administrator below the Administrative Templates node (for both machine and consumer policy).

Question 33. Can I Deploy Non-msi Software With Gpo?

Answer :

create the document in.Zap extension.

Dns Server Interview Questions
Question 34. Name Some Gpo Settings In The Computer And User Parts ?

Answer :

Group Policy Object (GPO) computer=Computer Configuration, User=User ConfigurationName some GPO settings inside the laptop and consumer elements.

Question 35. A User Claims He Did Not Receive A Gpo, Yet His User And Computer Accounts Are In The Right Ou, And Everyone Else There Gets The Gpo. What Will You Look For?

Answer :

make sure consumer now not be member of loopback coverage as in loopback coverage it doesn’t effect consumer settings handiest pc policy will applicable. If he is member of gpo clear out grp or not.

You may also want to test the computers event logs. If you discover occasion ID 1085 then you may want to down load the patch to restore this and reboot the pc.

Question 36. How Frequently Is The Client Policy Refreshed ?

Answer :

90 mins give or take.

Windows Troubleshooting Interview Questions
Question 37. Where Is Secedit ?

Answer :

It’s now gpupdate.

Question 38. What Can Be Restricted On Windows Server 2003 That Wasn’t There In Previous Products ?

Answer :

Group Policy in Windows Server 2003 determines a users proper to regulate community and dial-up TCP/IP properties. Users can be selectively limited from enhancing their IP cope with and different network configuration parameters.

Question 39. You Want To Create A New Group Policy But Do Not Wish To Inherit.

Answer :

Make sure you test Block inheritance a number of the alternatives when developing the coverage.

Question 40. How Does The Group Policy ‘no Override’ And ‘block Inheritance’ Work ?

Answer :

Group Policies can be implemented at multiple tiers (Sites, domain names, organizational Units) and more than one GP’s for each degree. Obviously it may be that a few coverage settings warfare hence the software order of Site – Domain – Organization Unit and inside each layer you set order for all described rules however you could want to pressure a few polices to never be overridden (No Override) and you could want a few bins to no longer inherit settings from a parent container (Block Inheritance).

A accurate definition of each is as follows:

No Override – This prevents toddler bins from overriding guidelines set at better ranges

Block Inheritance – Stops containers inheriting regulations from figure packing containers

No Override takes precedence over Block Inheritance so if a child box has Block Inheritance set but on the figure a group policy has No Override set then it's going to get carried out.

Also the highest No Override takes precedence over decrease No Override’s set.

To block inheritance perform the subsequent:

Start the Active Directory Users and Computer snap-in (Start – Programs – Administrative Tools – Active Directory Users and Computers)
Right click on at the field you desire to prevent inheriting settings from its figure and pick out
Select the ‘Group Policy’ tab
Check the ‘Block Policy inheritance’ choice
Click Apply then OK
To set a coverage to in no way be overridden perform the following:

Start the Active Directory Users and Computer snap-in (Start – – Administrative Tools – Active Directory Users and Computers)
Right click on at the field you want to set a Group Policy to not be overridden and pick Properties
Select the ‘Group Policy’ tab
Click Options
Check the ‘No Override’ option
Click OK
Click Apply then OK




CFG