Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Subscribe
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
Master Active Directory and Group Policy
7 students

Master Active Directory and Group Policy

Group Policy Maestro: Active Directory & GPO Mastery for Windows Server 2025, 2022, 2019 & Windows 10/11
Created byFabrice Chrzanowski
Last updated 10/2025
English

What you'll learn

  • Active Directory & GPO Fundamentals
  • GPO Creation & Management
  • Administrative Template Mastery: Set up and maintain a Central Store of ADMX/ADML files (including custom templates) for Windows Server 2019, 2022, 2025
  • Core Policy Scenarios: Implement password/lockout policies, software deployment (MSI and scripts), folder redirection, roaming profiles, and registry preference
  • Troubleshooting & Auditing: Use GPResult, RSoP, Event Viewer, PowerShell, and AGPM to diagnose replication issues, policy precedence conflicts, and maintain GPO

Explore related topics

Course content

8 sections • 17 lectures • 3h 33m total length

  • Introduction1:52

Requirements

  • Windows Server Experience: Familiarity with at least one recent Windows Server version (ideally 2019 or 2022).
  • Active Directory Basics: Understanding of domains, organizational units (OUs), and user/computer objects.
  • Lab Environment Access: Access to test environments (cloud‑based VMs or local Hyper‑V/VMware/VirtualBox) for hands‑on exercises

Description

Introduction & Rationale
In today’s dynamic IT landscape, effective policy management is non‑negotiable. “GPO Command Center: Active Directory Policy Mastery for Windows Server 2025–2019 & Win 10/11” bridges theory and practice, empowering administrators to architect, deploy, and troubleshoot Group Policy Objects (GPOs) across heterogeneous Windows environments. You’ll gain deep insight into the evolving feature set from Server 2019 through Server 2025, and master the client‑side nuances of Windows 10 and 11.

Who Should Enroll

  • Systems Administrators looking to standardize domain‑wide configurations.

  • IT Architects designing scalable Active Directory infrastructures.

  • Security Engineers tasked with enforcing compliance via GPO‑driven settings.

  • Helpdesk Leads automating desktop configurations and software deployment.

  • DevOps Practitioners integrating policy management into CI/CD pipelines.

Prerequisites

  • Basic familiarity with Windows Server (2019/2022).

  • Foundational knowledge of Active Directory and domain concepts.

  • Comfort accessing administrative consoles (Server Manager, GPMC).

Learning Objectives
By course end, you will be able to:

  1. Navigate and extend Active Directory’s OU structure for optimal GPO linkage.

  2. Create, edit, and link GPOs to Sites, Domains, and OUs targeting Windows Server 2019, 2022, 2025, and Windows clients.

  3. Manage ADMX/ADML templates in a Central Store for multi‑language deployments.

  4. Implement advanced security (Credential Guard, AppLocker, BitLocker) via GPO settings.

  5. Automate software deployment and folder redirection for seamless user experiences.

  6. Troubleshoot GPO application order, replication, and permission issues across domain controllers

ModuleTopics CoveredHands‑On Lab1. AD & GPO Foundations•

AD architecture & replication
• GPO processing order (LSDOU)
• Local vs. Domain GPO precedenceConfigure Local GPO on Windows 10 VM; observe policy clashes

.2. GPMC Deep Dive• Creating and editing GPOs
• Backup/restore and versioning
• Delegation and permissionsBuild GPOs for password policies; delegate to junior admins.

3. ADMX/ADML Management• Understanding Administrative Templates
• Central Store setup
• Custom ADMX creationImport ADMX for Server 2025; create a custom template for in‑house app.

4. Core Policy Scenarios• Password, lockout, and audit policies
• Software Installation (MSI, scripts)
• Folder Redirection & Roaming ProfilesDeploy MSI package via GPO; configure Documents folder redirection.

5. Security‑Centric GPOs• BitLocker enforcement
• AppLocker rule sets
• Windows Defender ATP integrationEnforce BitLocker with startup PIN; create AppLocker rules.

6. Multi‑Version Compatibility• Managing mixed‑OS environments
• Version‑specific policy settings
• AD replication considerationsTest policy application on Server 2019 vs Server 2025 DCs; troubleshoot schema mismatches.

7. Troubleshooting & Auditing• GPResult and logging
• Common errors and resolutions
• Audit policies and GP health checksSimulate replication failure; use Event Viewer and GPLogView to diagnose.

Who this course is for:

  • Systems Administrators aiming to automate and enforce domain‑wide settings at scale.
  • IT Architects designing robust, future‑proof Active Directory and policy infrastructures.
  • Helpdesk & Desktop Support Leads looking to streamline software installs, desktop configurations, and user profiles.

Report abuse