6.1.6.5. Group Policy

6.1.6.5.1. Introduction

Group Policy (GP) is used to manage users and devices in a network environment and defines various template components required by system administrators to manage their work.

Group Policy has the following functions:

• Manage the registry

• setup script

• redirect folder

• Manage applications

• Specify security options

6.1.6.5.2. Common concepts

The Group Policy Container (GPC) is stored in the Active Directory and contains GPO attributes, configuration information, and versions. GPT can be found by GPC.

The Group Policy Template (GPT) is stored on the domain controller and contains all Group Policy information. Includes administrative templates, security, scripts, software installation, and more.

Among them, the amount of information in GPC is small and the capacity is small, and the amount of information in GPT is large and the capacity is large, so the two parts are stored separately. Prevents performance from being affected by storing too much data in Active Directory.

A Group Policy Object (GPO) is a collection of various Windows Group Policy settings, stored in GPC and GPT.