Group Policy Tutorial For Beginners - Live Training

[@p26062309]

A piece of advice to all viewers, do not skip a sec of this video, it might be possible you miss something very important... Abundant source of knowledge. Thanks a ton Paul

[@SLP-eb1wp]

i fell asleep 1 minutes in

[@hawkertyphoon4537]

Managed AD users and computers for 7 years now, and was able to follow the steps on our DC. Though i am part of End user computing, and not Engineering or Network, this type of Lab was awesome to show me the Shenanigans of GP Editing. Hands-on stuff with direct results, and i correctly guessed the error too. Great step in the right direction!

[@ServerAcademy]

Thanks! I am working on releasing a free AD fundamentals course on my website that includes this IT lab.

[@joshuajoseph3908]

This is a better training/ explanation than my Windows Server college class! Showing the process helped so much!

[@enigmatic4889]

I luckily fell upon on this video and want to say thank your for it flee server admin videos. Helped me so much. Happy to see you still have videos coming.

[@akbf007]

THANK YOU MY BROTHER FROM ANOTHER COUNTRY AND ANOTHER FAMILY!!!

[@mahalkita118]

This is the best free software Ive seen. Respect.

[@hamzapuris]

As always, great tutorial for beginners. Thank you for doing this!

[@madcowdk]

Outstanding instruction. So glad I found this channel. Thank you!!

[@rakotondrasoahary5795]

Thank you so much, Paul! your tutorial is amazing! Question: what is the best way to get any MSI software packages from the server and ready to deploy to the client's computer? the sever refuse to download

[@ServerAcademy]

Hey, if your clients wont install the MSI you configured in your GPO I would do this: 1) Make sure the GPO is linked to the right OU (check OU contents to see if your target server is there), 2) Make sure the GPO shows up in your target client with gpresult /r, 3) Make sure there are no GPO errors in rsop.msc, 4) Make sure you can open windows explorer and manually run the installer from the target machine (it has to be accessible by your target computers). Hope this helps! I have all of this outlined in detail on my site in the Group Policy course

[@SCUUZEM3]

dude you are an amazing teacher, definitely getting that online course.

[@ServerAcademy]

Thank you Erik!

[@Marcos-fm3vp]

Excellent video, thx for the help!!

[@tiagomelo8431]

This training is awesome, well done mate!

[@jannajk91]

awesome training!

[@olubodealbert2673]

Great Teacher

[@myreviewsstore621]

Ima download it thanks for sharing!!

[@baharehroodgari4038]

Hi, thanks for your great videos. Can you please help me how to restart all the computers in the domain everyday at a specific time via group policy? Thank you:)

[@vasifali4130]

i liked your training, sir

[@cristianpitisciuc1037]

Great work ! I have a question though....Why doesn't my Group Policy Management console show Domain Users and Domain Computers containers? Were they somehow manually added or created ? I've created 4 OU's in ADUC, but if i switch to the GPMC, there's no container Domain Users or Domain Computers, neither in the main tree, nor in the OU containers.... I don't get it...

[@ch0mbe]

He created those himself.... he does explain it in a previous video... this is just for keeping everything tidy and structured.... so do whatever works for u

[@silverchariottv7865]

Absolutely amazing info.

[@cdixon_07]

Thanks Paul!

[@yacinefetouh1011]

What are you using to run lab ? RDS or Apache guacamole ?

[@haniffsalleh8852]

Have you uploaded any of your soft?

[@maxlewis2234]

the course is good - speaks to fast - for english second language groups-

[@onechamp1ful]

If the software is updated will it try to install the old one in the old systems?

[@beeniemen]

Very helpful for novice

[@mom6215]

Thanks helpful.

[@Kreemerz]

Is a server required for use of group policy? I have a 5 computer home lab and want to manage those computer's configurations and features. But don't want to buy a server.

[@silverchariottv7865]

Question, let's say I want a shared drive mapped to every computer regardless of who logs into the machine for example a public drive. In the security filter, should I enter Domain Users, Domain Computers, or both? Furthermore, when I edit the GPO should I edit the User configuration or the Computer configuration to map the drive? Would it work either way?

[@silverchariottv7865]

So if I'm understanding this correctly, I can link a mapped drive GPO to the user OU and then configure the GPO under user settings for the Mapped drive. That means I don't need to link the mapped drive GPO to the workstation computer because it wouldn't work anyway?

[@runrunsomethings5229]

Another great Tutorial Paul. I have an urgent question please. Is it possible to create a GPO for Clients update without a WSUS Server where "Specify Intranet Microsoft update service location" is not enabled? Thanks

[@ServerAcademy]

Yes absolutely, you can still configure when updates are installed and if they are forced or optional. You would use WSUS IF for example you need to specify exactly which updates are installed. This is useful in some dev environments where a specific update could break software your team might be developing. Hope that helps!

[@rafathmujthaba8501]

good explanation

[@ServerAcademy]

Thank you!

[@aayush-p3f]

Thanks Paul .

[@rossnatashafaznur488]

Awesome program

[@thugjitsugamers829]

following you step by step on this video, but when i try to add Notepadd++ i get an error sayoing....."Add operation failed. Unable to extract deployment information from this package. Run validation on the package to ensure that the package is correct". any ideas?

[@thugjitsugamers829]

got it...had to find a .msi version. Just google notepad++ msi for deployment

[@abetuna2707]

thank you

[@BeccaTheBoring]

Too late to request a topic for the next live stream? Cuz I’d love a tutorial on redomaining a computer using Powershell.

[@ServerAcademy]

Not at all. So leaving the existing domain and joining a new domain?

[@BeccaTheBoring]

@@ServerAcademy, like, when a computer drops off the domain and needs to be rejoined. The only way I currently know how to re-domain a computer is by physically changing it to a work group, restarting it, then putting it back on the domain. But, after doing the Power Shell part of the training, it seems like Powershell could be used to do this much easier?

[@jasonmiller1076]

Is there a way to have the Domain Controller push out the Group Policy Changes instantly instead of manually running the command on all the clients? If not I'm sure you could run the command remotely on all the clients using PowerShell

[@ServerAcademy]

You can run gpupdate on all computers using powershell and a ps session, or you can update the default policy refresh interval

[@silverchariottv7865]

Even though you applied the wallpaper GPO to the Computer OU and configured it for the user, wouldn't the Group Policy still apply because it's linked to the Computer OU meaning "every computer on the domain gets this policy"? Or if you applied it to the Computer OU and edit it, you have to configure computer settings?

[@silverchariottv7865]

Basically why doesn't it apply to all PCs in that OU regardless of user?

[@silverchariottv7865]

I guess because you enabled the setting under the user and not under the computer........had you enabled the desktop setting under computer config , then the desktop wallpaper would have changed??

[@johnkline17]

GREAT REFRESHER

[@sanjuvvallath745]

Hi Sir, Now If we apply group policy to the computers, fixing the desktop wallpaper, won't it even affect the all the users logging in all the users on that computer?

[@vipcesh]

Thanks

[@pedromaione6461]

I'm trying to refresh my almost forgotten knowledge of Group Policy. I am doing this at home with my own environment but I got stuck trying to extract the .msi file out of an .exe installer. In this case I started installing Notepad++ and left it waiting for my first response, browsed the %temp% folder to find the required file but I cannot find it. How did you obtain the MSI installer? Using 7zip to inspect the content of the .exe installer also didn't get any obvious result. I can't figure out what I'm missing. Thanks.

[@isumitd9586]

So group policy definition is.. it is a tool included in ADDS directory

[@mohitsurani6204]

impression almost everyone does their soft in soft soft but record their voice in ProTools. Not sure why. Would like learning how to do

[@kamilbuszmann4973]

Hi I made a OU and I added a group to it. I linked a GPO where o set wallpaper. I run command gpupdate / force on both machines. It doesn't work. But if I add user directly to OU wallapper appears on his desktop. Do you know how to link it for group in OU ?

[@josephcabayacruz9249]

can we able to set GPO automaticaly using drive map for example" Z:\\(server)\(folder)\%username%" < this kind of systax for new users to be created. scenario: i created new user, and when he/she logs in, automatically there will be a file share Z drive on his/her username This PC. thanks

[@nixonong3891]

eccellente...

[@AimOnTargets]

I am a student, how do I get SCCM ? Is it free? I want to use msi to silent install notepad++ like you did. I downloaded a free software called EMCO and converted the notepad exe to an msi but it dosent work when im in AD DS

[@pranav7805]

I'd recomnd going through a soft theory video on YT and making notes, there's a good 2h30 one wNice tutorialch softs looong but it will

[@BadLiar-dt7hz]

Is there any tutorial or guide (pdf) for windows 10 group policy editor

[@NWOslave]

when i do this on server 2019 i get the following error "Add operation failed unable to extract deployment information from the package..." ideas? (FIXED) I discovered the msi installers i was trying to use were not true msi packages to some degree. i had to specifically look for deployable msi from both firefox and 7zip. for the 7zip there is a section called windows 7 and another with no designation which i assumed were deployable. they were and was able to install to a vm computer as shown in the video

[@aritrapal4873]

User configuration works but Computer configuration doesn't work on OU(contains computer that are joined on the domain)

[@hanzala4900]

Hi so to deploy a installation in group policy it requires a windows installer package (MSI) but i have application file (EXE) what do I do now?

[@Joeymac181]

Ugh nobody answered??? Im stuck at same step

[@hanzala4900]

@@Joeymac181 mainly it's done through sccm, if you're learning, it won't be an issue if you're starting off in IT, don't worry about it

[@שימירוזנברג-ו4ת]

@@hanzala4900 I'm the only IT guy in this school. I need to know how to make it

[@שימירוזנברג-ו4ת]

@@javierhernandez5296 I don't wanna risk in any virus, plus I need more complicated programs then notepad, so I need to make it by myself. Preferably with a windows tool, not a third party

[@xkorbekx]

naming your OU "domain users" instead of just "users", is that a best practice or personal habit?

[@mbalekagheni4450]

Hi bro, can you show me how to install OS From a domain controller ?

[@ServerAcademy]

Install Windows Server OS, then add the Active Directory Domain Services role. That will give you a domain controller.

[@mbalekagheni4450]

@@ServerAcademy thanks I had alrwady the answer , I was asking for the windows deployment services

[@jagathisanb1442]

I am applying for all g policy including the server applied .how to apply without the server.i want to apply only domain users. Please help

[@bipinverma9747]

sirin hamza fruity edition doesn’t have all the plugins or samples and it can’t record content either

[@zzzzzz6686]

College is all about money and politics. It's their legal way of gambling. You put money into college, professors/instructors don't teach you everything to do your job (not even on the basic level), they throw the books at you, you have to teach yourself, and in the end, you are hoping to make more when you're done. While you're teaching yourself, the faculty staff, the professors, and the deans sit back to let the money roll in. They don't do anything. The question is, WHY DO WE HAVE TO PAY SOMEONE SO THAT WE ARE FORCED TO TEACH OURSELVES WHILE AT THE SAME TIME, WHAT WE LEARN IN COLLEGE DOESN'T PREPARE US FOR REALITY? As I mentioned, it's all about money. No one graduates with a 4-year degree and comes out as a professional on the first day of the job. A degree is just a piece of paper indicating that you completed these courses based on a ridiculous benchmark or standard. It doesn't mean you know how to do the job. Point is, book smart is not equivalent to work experience unless you're lucky enough to have great professors and instructors that actually know how to teach and taught you what you need to know.

[@mrbazzzinga4878]

I noticed you do everything very fast. in you PowerShell tutorial things where too fast can you please slow down little bit

[@isaacmaciel6679]

Your initiative is fine, but you lose your main line of argument by giving unnecessary information all of the sudden. You just lose consistency and coherence, please be concise, precise and dont get constantly distracted as well

[@truevoice2469]

@Isaac I agree. His live course quickly turned into a live general IT support session. He shouldn't have been surprised when he realized he was already 50 mins into his hour. :P It was nice to learn about how GPOs can be used for automated software installations, but I feel like we barely scraped the surface and that there were a lot of other subcategories we could've dived into.

[@GuruChaz]

I'm sorry, man, but you had me all the way up to setting group policy for the desktop wallpaper. My mind learns a certain way and there was too much flip flopping around and disturbance from answering live chat questions that I could not process this procedure. No offense to you or live chat, but it is what it is. The procedure got all broken up and I ended up being confused rather than learning something. I wish you could have went back and showed that whole desktop background group policy again at the end without interruptions or glitches...and again, I know things happen and I don't mean to sound like a jerk. I just bet 90% of the viewers watching got lost too and couldn't do that procedure if you tested them.

[@ServerAcademy]

I feel you! I stopped doing live training for this reason. All of this training is outlined in a streamlined (no interruptions and mistakes edited out) on ServerAcademy.com

[@LinaSarkar7307]

he softs like he could be the automated voice ssage

[@maxmudassar]

to

[@muhammadfaizan8117]

I AM BROKE SO I CANT AFFORD IT MY PARENTS WILL NEVER ALLOW (TT)

[@kimsun9426]

어느 두부업체 가보니 전부가 일반면히 딱한명만

[@gilgilbert5866]

Not true that GPO is ONLY INSTALLED via Windows Domain Controller or Server. Please provide ONLY ACCURATE information to your audience!!!

[@kingkhubaib-e4j]

tati pop training

[@lalosupreme9810]

heads up. if you are doing this on vbox and you are getting a clock synch error during the "gpupdate /force" part on the guest, try restarting both the guest and the server; one or the other could have different times. another solution instead of fully restarting: Search bar > services > Window Time > properties > stop/start i was running into this issue because i had booted the guest but the server would always stay on pause which cause the time to be out of synch. this kept my guest from synching because the guest had the current time while the server had an older time on it (days apart lmao). a quick restart fixed it.