This supplemental video is to be used while studying the CompTIA Security+ SY0-301 Cert Guide (2nd Edition)

The steps are as follows:
Step 1. Access the Windows Server.

Step 2. Open your MMC if you have one. If not, create a new one so that you can keep all of your snap-ins organized in one window. Add the Active Directory Users and Computers snap-in.

Step 3. Create a new OU:
A. Navigate to Active Directory Users and Computers > [domain name]. In this example I use the domain name
B. Right-click the domain name.
C. Select New > Organization Unit.
D. Name the OU. For example: accounting. Then click OK. This should add the new OU to the domain.

Step 4. Create a new policy based off the OU:
A. Right-click the new OU and select Properties. This displays the accounting Properties dialog box.
B. Click the Group Policy tab.
C. Click the New button. Name the policy, for example acct-policy and press Enter. Then click Close.

Step 5. Add the new policy to the MMC:
A. Go to File > Add/Remove Snap-in.
B. In the Add/Remove Snap-in dialog box, click Add.
C. Select the Group Policy Object Editor and click Add.
D. In the Select Group Policy Object dialog box, click Browse.
E. Double-click the folder.
F. Highlight the policy (for example acct-policy) and click OK.
G. Click Finish, Close, and OK for the other open dialog boxes. This should add the acct-policy to the MMC.

Step 6. Configure the policy:
A. Expand the acct-policy.
B. Navigate to User Configuration > Administrative Templates > System.
C. Double-click Don’t run specified Windows applications.
D. Click the Enabled radio button.
E. Click Show.
F. Click Add and add an application, for example winword.exe (the executable for Microsoft Word). Then click OK. Be sure to reset this at the end of the lab if it will affect any computers or users.
G. Click OK for the policy’s Properties window. This brings you back to the MMC. The policy will now be enabled.
H. Double-click the Run only allowed Windows applications policy.
I. Enable the policy; then click Show.
J. Add an application by clicking the Add button and typing the name of an application, for example excel.exe (the executable for Microsoft Excel), and clicking OK.
K. Click OK for the policy’s Properties window. This brings you back to the MMC. The policy will now be enabled.

Step 7. Save your MMC.

About Dave Testimonials FAQ Site Map Contact
Copyright © David L. Prowse – Official Website - All Rights Reserved