Microsoft Mcse Configuring A Root Ca

By Author: Zoey Black
Total Articles: 286
Comment this article

A third option that exists for SuperCorp is deploying Group Policy using preferences. This way, SuperCorp could make the shared folder available by default through a mapped drive. And, if the users decide they no longer want access to the mapped drive, they can instantly remove it, without the need for a script or any other complex deployment process.

Whenever you're supporting an operating system that has as many MCSE 2008 components as Windows or any of its supported applications, there are ultimately going to be times that the software will need to be updated in order to function either properly or in a more improved manner. Later in the chapter, when I talk about Configuring automatic updates for an entire enter- prise, I'll dive much deeper into this subject. But for now, I'll brie?y touch the subject of using Group Policy for automatic updates.

With Group Policy, you can directly link a GPO to an Active Directory container that can be used to deploy updates through Windows Software Updates Services (WSUS). According to the rules of Group Policy objects, you can of course ...
... link this to any container you desire. Thus, in a simpler environment, administrators commonly make a practice of deploying a WSUS GPO to an entire domain. However, at the enterprise level, this is neither practical nor recommended, because of the increased complexity of an enterprise environment. There could be situations where employees are receiving updates that could compromise previously established objectives or disrupt work?ow.

Thus, according to Microsoft, at the enterprise level GPOs with WSUS speci?cations should be avoided at the default domain and domain controllers levels. But instead, you can place them on an individual domain or OU level.

It will normally take 90 minutes for a freshly created GPO with WSUS MCSE Certification set- tings to update throughout your infrastructure. However, you can choose to manually force it to update by using the gpudate /force command. Of course, one of the most common uses of Group Policy with WSUS at the enterprise level is to point computers in an organization toward an actual WSUS server. This way, by default, all members of the organization that need to access the WSUS server will have these settings defined by default and not have to manually look for any updates. Then, the WSUS server can determine the appropriate update requirements needed for the individual computer.