官术网_书友最值得收藏!

Site-level policies

Something that is sort of outside the scope of this book, but is relevant here, is Active Directory Sites and Services. Inside any Active Directory environment, your DCs will automatically have this tool installed, called AD Sites and Services. The purpose here is to define your physical locations of the network, sites, if you will. The many small businesses have only a single site, and often they never have to even open this tool. Makes sense, as everything is always connected to the same site. However, as soon as you grow your business and expand to a second location, the network typically gets much more complex, and you now have IP subnets that are different between the two sites. Active Directory Sites are defined by what IP address space, or subnet, a computer is currently residing in. When your computer checks in with AD, it is automatically known what site you are part of based on the IP address of your computer.

Here is a quick picture of Active Directory Sites and Services, so you can see the layout and also see that the different sites are defined by which IP addressing spaces they contain:

Once your environment is large enough and you have defined your Sites inside this tool, you have now enabled Group Policy to be able to issue settings to computers (and users) based on the site that they reside in. Users follow the computers in this scenario. If a computer account is logging in and Group Policy recognizes it to be in the GrandRapids site, it will apply all GPO settings that are flagged for GrandRapids. The same is true of any users that log into that computer; since the computer is currently sitting in GrandRapids, any user-based policies that are filtered for GrandRapids will also apply.

Keep in mind that computers only receive site-based Group Policy settings while they physically reside in that site. If a computer moves to a new site, any site-level GPOs that were being applied will stop, and new site-level GPOs from the new site will apply.
主站蜘蛛池模板: 湖口县| 江阴市| 托里县| 株洲县| 南昌县| 上思县| 扎兰屯市| 庆城县| 巴中市| 大同市| 常德市| 阜宁县| 驻马店市| 庐江县| 静安区| 休宁县| 喀什市| 望城县| 新乡市| 武川县| 巴林右旗| 宁强县| 西充县| 理塘县| 靖州| 兴文县| 云浮市| 衡山县| 醴陵市| 吉水县| 宣武区| 海丰县| 凤山县| 新沂市| 平湖市| 合水县| 堆龙德庆县| 泰宁县| 林周县| 尼玛县| 濉溪县|