Documenti di Didattica
Documenti di Professioni
Documenti di Cultura
Version 1.1
Microsoft | Services
ITOE Educate
Information in this document, including URL and other website references, represents the current view of Microsoft Corporation as of the date of publication and is subject to change without notice to you.
Descriptions or references to third party products, services or websites are provided only as a convenience to you and should not be considered an endorsement by Microsoft. Microsoft makes no representations or warranties, express or implied, as to any third party products, services or websites.
The names of actual companies and products mentioned herein may be the trademarks of their respective owners. Unless otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted herein are fictitious.
Complying with all applicable copyright laws is the responsibility of the user. This document is intended for distribution to and use only by Microsoft Premier customers. Use or distribution of this document by any other persons is prohibited without the express written permission of Microsoft. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation.
Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, this document does not give you any license to Microsofts intellectual property.
MICROSOFT MAKES NO WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, AS TO THE INFORMATION CONTAINED IN THIS DOCUMENT.
Microsoft | Services
ITOE Educate
Microsoft Premier Support Services Description Exhibit: License Terms for Standard Workshop and WorkshopPLUS
This Exhibit is an agreement between Microsoft Corporation (or based on where you live, one of its affiliates) and you. The license terms for Standard Workshops and WorkshopPLUS are made pursuant to your Microsoft Premier Support Services Description (the Services Description). The terms of the Services Description are incorporated herein by this reference. Any terms not otherwise defined herein will assume the meanings set forth in the Services Description. This Exhibit applies to any Standard Workshop or WorkshopPLUS delivered under your Services Description, including the media on which you received the workshop, if any, and any materials, sample code, documentation or software provided in conjunction with the Standard Workshop or WorkshopPLUS. These terms also apply to any Microsoft updates, supplements, and Internet-based services
for a Standard Workshop or WorkshopPLUS, unless other terms accompany those items. If so, those terms apply. BY PARTICIPATING IN THE WORKSHOP, YOU ACCEPT THESE TERMS. IF YOU DO NOT ACCEPT THEM, DO NOT PARTICIPATE IN THE WORKSHOP OR USE ANY STANDARD WORKSHOP OR WORKSHOPPLUS MATERIALS AND SOFTWARE.
If you comply with these license terms, you have the rights below. Scope of License. Subject to the terms of this license, Microsoft grants you: (i) a conditional license to participate in the Standard Workshop or WorkshopPLUS you have selected, and (ii) a limited, personal right to use the materials, sample code, documentation and software, if any, that are associated with a Standard Workshop or WorkshopPLUS. Any rights not granted in this Exhibit are reserved by Microsoft. Restrictions on Use. Your rights to use the materials, sample code, documentation and software provided in a Standard Workshop or WorkshopPLUS are limited. You must comply with any technical limitations that restrict your use. In addition, you may not: record the Standard Workshop or WorkshopPLUS in any manner; reproduce, store in or introduce into a retrieval system, or transmit in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, any documentation, sample code, software or materials from a Standard Workshop or WorkshopPLUS; work around any technical limitations or restrictions incorporated into the materials, sample code, documentation or software; reverse engineer, decompile or disassemble the software, except and only to the extent that applicable law expressly permits, despite this limitation; publish any documentation, sample code, software or materials from a Standard Workshop or WorkshopPLUS for others to copy; rent, lease or lend any documentation, sample code, software or materials from a Standard Workshop or WorkshopPLUS; or transfer any documentation, sample code, software or materials from a Standard Workshop or WorkshopPLUS or this agreement to any third party.
Rules for Participation in Standard Workshop and WorkshopPLUS. You agree to abide by the following rules as a condition of participation in a Standard Workshop or WorkshopPLUS: You agree that while on Microsoft property you will comply with all applicable local, state and federal laws, statutes and regulations, including without limitation, all laws prohibiting harassment of any kind in the workplace. You agree to abide by applicable Microsoft rules, regulations and security measures while participating in a Standard Workshop or WorkshopPLUS on Microsoft property.
Microsoft | Services
ITOE Educate
Sample Code and software provided to you are owned solely by Microsoft and licensed to you for install, use and access while participating in the workshop. Upon completion of the workshop, you will return all sample code and software to Microsoft upon our request.
Term. Upon completion of the workshop, you will: (i) vacate the workshop office space or workspace; (ii) return to Microsoft any identification badges and premises access cards provided to you as a workshop participant; (iii) return all Microsoft-owned property to Microsoft, including but not limited to any Microsoft software and materials provided to you in connection with your participation in the Standard Workshop or WorkshopPLUS; and (iv) remove all your personally owned equipment or property from Microsoft premises. Disclaimer of Warranty. Any software provided to you is licensed as-is. You bear the risk of using it. Microsoft gives no express warranties, guarantees or conditions. To the extent permitted under your local laws, Microsoft excludes the implied warranties of merchantability, fitness for a particular purpose and non-infringement.
Microsoft | Services
ITOE Educate
Table of Contents
Table of Contents
LAB 5: GROUP POLICY RECOVERY .............................................................................................................................. 7
Introduction ............................................................................................................................................................... 7 Objectives ................................................................................................................................................................... 7 Prerequisites .............................................................................................................................................................. 7 Estimated time to complete this lab .......................................................................................................................... 7 For more information ................................................................................................................................................. 7 Scenario ...................................................................................................................................................................... 7
Microsoft | Services
ITOE Educate
Objectives
After completing this lab, you will be able to: Learn how to document you GPO environment Lear how to recover from GPO disasters.
Prerequisites
The following virtual machines are necessary to complete this lab: LitwareDC1 & LitwareDC2 o o Username: litware\Administrator Password: password1!
Scenario
Help desk is receiving calls from specific application owners that their applications are not getting the appropriate setting from group policy. Upon further investigation you find that the Group Policy in question has been deleted but on the positive side there was a backup of the policies.
Microsoft | Services
ITOE Educate
Review the current Group Policy Environment. Take a full backup of all your GPOs using GPMC and PowerShell.
4. You can also perform the same task using PowerShell. So lets launch PowerShell by clicking the PowerShell icon on the taskbar
Microsoft | Services
ITOE Educate
5. Type import-module GroupPolicy in the PowerShell command and press ENTER. 6. Type Backup-GPO -All -Path C:\GPOBackup and press ENTER 7. Once the PowerShell cmdlet finishes, open Windows Explorer and navigate to the C:\GPOBackup folder and look at the files that were created by the backup script.
Notice you have 2 backups in the C:\GPOFolder. One taken with GPMC and one taken with the PowerShell cmdlet.
10
3. Mark the check box Show only the latest version of each GPO. 4. Select the Sales Settings GPO from the list and click View Settings. An Internet Explorer window will open showing all GPO settings and where the GPO was linked previously (you might need to click CLOSE in the Internet Explorers blocked content alert).
You can use the settings feature to compare the production GPO with your previous backups, in case youre looking for inconsistencies or recent changes.
5. Check the Links section of the report and write down where the GPO was previously linked to (which OU or Site or Domain): Sales Settings: ________________________________________________________ VIP Sales Staff: _______________________________________________________ 6. Once you confirm this is the right backup, close the Internet Explorer and go back to GPMC. With the Sales Settings GPO selected, click Restore. 7. Click OK to accept the change and OK again once the process is completed. 8. Repeat the steps 4-6 for the VIP Sales Staff GPO, so its also restored from the latest backup. 9. Click Close to end the restore process and return to GPMC.
Microsoft | Services
ITOE Educate
11
The GPO link has not been restored and this is the expected behavior of GPMC. So, in a massive disaster like this one, you would have to know where each GPO was linked to. You must have it documented somehow, and well discuss three methods of documenting GPO links in the next steps.
3. Using the data obtained in Step 5 of the previous section of this lab, while still in GPMC, right click the OU where the two GPOs just restored existed (Sales OU) and select Link an existing GPO 4. Select Sales Settings and VIP Sales Staff (use the CTRL key to select both at the same time) and click OK. 5. Notice the two GPOs will show up in the right-hand side panel as linked to that OU now.
This lab just went over an optional restore method for GPOs. The traditional method would be a lot more complicated, and would take a DC down in safe mode, restore a system state or full backup, mark the right objects as Authoritative (both the GPOs and the OUs where they were linked) and then mark the SYSVOL as D4.
Microsoft | Services
ITOE Educate