Group Policy Administration & Security Settings Flashcards

What is WMI filtering in Group Policy used for?

Answer: Applying a GPO only to computers or users that meet specific WMI query criteria

WMI filters evaluate a WMI query against a target machine, and the GPO only applies if the query returns true, enabling hardware- or OS-based targeting.

In which SYSVOL subfolder are GPO templates stored on a domain controller?

Answer: SYSVOL\domain\Policies

Each GPO's template files (ADM/ADMX files and settings) are stored in SYSVOL\domain\Policies\{GPO-GUID}\ on every domain controller.

What does the Group Policy 'Loopback Processing' setting (Replace mode) do?

Answer: Applies the computer's user-targeted GPOs instead of the user's GPOs

In Replace mode, Loopback Processing discards the user's normal GPO set and applies only the user settings from GPOs linked to the computer's OU.

Which Group Policy preference item type allows you to map network drives per user?

Answer: Drive Maps under User Configuration → Preferences → Windows Settings

Drive Maps in User Configuration → Preferences → Windows Settings lets you create, update, replace, or delete mapped drives for targeted users.

What is the purpose of 'Security Filtering' on a GPO link?

Answer: To restrict which users or computers a GPO applies to within the linked container

Security Filtering controls which security principals (users, groups, computers) within the linked OU actually receive the GPO's settings.

Which GPO node contains settings for software restriction policies and AppLocker in Windows Server 2008?

Answer: Computer Configuration → Windows Settings → Security Settings → Software Restriction Policies

Software Restriction Policies are configured under Computer Configuration → Windows Settings → Security Settings → Software Restriction Policies.