官术网_书友最值得收藏!

Site-level policies

Something that is sort of outside the scope of this book, but is relevant here, is Active Directory Sites and Services. Inside any Active Directory environment, your DCs will automatically have this tool installed, called AD Sites and Services. The purpose here is to define your physical locations of the network, sites, if you will. The many small businesses have only a single site, and often they never have to even open this tool. Makes sense, as everything is always connected to the same site. However, as soon as you grow your business and expand to a second location, the network typically gets much more complex, and you now have IP subnets that are different between the two sites. Active Directory Sites are defined by what IP address space, or subnet, a computer is currently residing in. When your computer checks in with AD, it is automatically known what site you are part of based on the IP address of your computer.

Here is a quick picture of Active Directory Sites and Services, so you can see the layout and also see that the different sites are defined by which IP addressing spaces they contain:

Once your environment is large enough and you have defined your Sites inside this tool, you have now enabled Group Policy to be able to issue settings to computers (and users) based on the site that they reside in. Users follow the computers in this scenario. If a computer account is logging in and Group Policy recognizes it to be in the GrandRapids site, it will apply all GPO settings that are flagged for GrandRapids. The same is true of any users that log into that computer; since the computer is currently sitting in GrandRapids, any user-based policies that are filtered for GrandRapids will also apply.

Keep in mind that computers only receive site-based Group Policy settings while they physically reside in that site. If a computer moves to a new site, any site-level GPOs that were being applied will stop, and new site-level GPOs from the new site will apply.
主站蜘蛛池模板: 肇州县| 克什克腾旗| 福贡县| 黄骅市| 行唐县| 巫山县| 太湖县| 礼泉县| 桐庐县| 清远市| 英吉沙县| 安阳市| 城固县| 广平县| 邵东县| 马尔康县| 张家口市| 肇源县| 定陶县| 若尔盖县| 温宿县| 金乡县| 攀枝花市| 平山县| 昆山市| 绥德县| 海丰县| 读书| 牡丹江市| 奉化市| 阳原县| 开远市| 泸溪县| 张家口市| 新巴尔虎右旗| 武乡县| 建始县| 青河县| 铁力市| 石狮市| 上杭县|