Group Policy Basics & Tools
This specific default policy is natively linked to the Domain Controllers organizational unit to manage domain controllers.
What is the Default Domain Controller Policy?
An administrator can configure this container-level option to completely stop Group Policy settings from parent containers from trickling down to child objects.
What is Block Inheritance?
Unlike transform files, this specific file type is explicitly used to apply service packs and hotfixes to software that is already installed.
What are MSI patch files?
This specific class of Certification Authority functions purely standalone and does not require Active Directory Domain Services to issue certificates.
What is a Standalone CA?
This primary AD FS role component must be deployed inside each participating forest to issue, manage, and validate claims requests.
What is a Federation Server?
This term refers to the final, cumulative aggregate of policies that are actually applied to a computer and the user logging into it.
What is the Resultant Set of Policy (RSoP)?
During loopback policy processing, this specific mode completely replaces the user's standard user settings with the user settings defined in the computer’s GPO.
What is Replace mode?
This is the very first step required when deploying software via Group Policy before a package can be assigned or published.
What is creating a distribution point on the publishing server?
This is the maximum number of Root CAs that can exist at the absolute top of a single public key infrastructure (PKI) certificate hierarchy.
What is one?
AD FS relies on this logical engine component—such as Active Directory, AD LDS, or SQL Server—to actively look up and retrieve claim values.
What is an attribute store?
How do previously applied Group Policy settings behave on a client computer if it is entirely disconnected from the corporate network.
What is they continue to take effect?
This Group Policy Preferences targeting feature is used to fine-tune the scope of individual preference items so they apply only to specific selected users or computers.
What is Item-level targeting?
This central, shared directory is where ADMX files must be placed if you want to implement a single Central Store for an entire domain environment.
What is the SYSVOL directory?
To prevent a Root CA from being compromised, it is a recommended security best practice to keep it in this state unless active maintenance or CRL issuance is required.
What is offline (and stored in a secure location)?
In Windows Server 2016, AD FS only contains the Federation Service; if an organization requires an edge reverse proxy, they must instead install this specific role service.
What is the Web Application Proxy?
Along with the Results Wizard, this command-line tool or simulation wizard can be utilized in Windows Server 2016 for RSoP analysis.
What is GPResult.exe (or the Group Policy Modeling Wizard)?
These are the four standard actions that can be assigned to the lifecycle of most preference settings when managing items like files, folders, or shortcuts.
What are Create, Replace, Update, and Delete?
When creating startup, shutdown, logon, or logoff scripts, administrators can execute batch files, JScripts, VBScripts, or this command-line shell framework.
What is PowerShell?
Rather than publishing an entirely new list of revoked certificates, this specific type of list contains only the certificates revoked since the last regular CRL publication.
What is a Delta CRL?
This specific AD RMS certificate contains the public key utilized to encrypt the internal content key within an issued publishing license.
What is a Server Licensor Certificate (SLC)?
These underlying client components physically step in to interrupt GPO settings and apply those specific changes to the local operating system or logged-on user.
What are Client-Side Extensions (CSEs)?
To narrow down the massive list of Administrative Templates, an administrator can toggle property filters based on Keywords, Requirements, Configured/Not Configured, or this administrative category.
What is Managed or Non-Managed settings?
In Group Policy Preferences, legacy systems use Power Options and Power Schemes, whereas Windows Vista and later systems require this specific item configuration.
What is a Power Plan?
This AD CS role service provides a method to safely issue and renew certificates via a web browser for non-domain-joined devices or non-Windows operating systems.
What is CA Web Enrollment?
Of the three core databases in an AD RMS infrastructure, this specific database holds historical records regarding client activity and license acquisition.
What is the logging database?