Chapter 7. Group Policy and Active Directory Security

Terms You’ll Need to Understand
✓	Account lockout
✓	Account policies
✓	Auditing
✓	Auditpol.exe
✓	Fine-grained password policies
✓	Password settings objects (PSO)

Concepts/Techniques You’ll Need to Master
✓	Managing security configurations
✓	Configuring account policies
✓	Configuring fine-grained password policies
✓	Using Group Policy to configure auditing policies
✓	Using Auditpol.exe to configure auditing policies

You have seen how Group Policy works and how to set up Group Policy objects (GPO) to configure various aspects of the Windows computing environment. You have also learned about Group Policy succession and how you can modify the sequence in which GPOs are applied and its effect when policy settings conflict with one another. You have also read about the use of Group Policy to maintain a consistent software environment, where users and computers receive a well-regulated set of software applications that can be modified and upgraded as required, as well as the removal of outdated software. This chapter focuses on the use of Group Policy to create and enforce a secure computing environment that protects your computers and data from whatever the bad guys might attempt to throw at you.