After completing Windows 2000 Security Design MCSE 70-220: Designing Security Policy Inheritance, the user should be able to:

	Describe Group Policy and its application
	Create, edit, apply, and import Group Policies
	Explain the inheritance relationships among Group Policies in an Active Directory hierarchy
	Explain how Group Policies are implemented in mixed-mode environments
	Design a Group Policy strategy

Understanding Group Policies

	Group Policy overview
	Group Policy and security
	Applying Group Policy
	Client-side processing

Implementing Group Policies

	Implementing Group Policies
	Delegating control of Group Policy
	Filtering Group Policies
	Controlling Group Policy with Group Policy

Group Policy Inheritance

	Group Policy inheritance
	Blocking inheritance
	Preventing override
	Loopback

Group Policies in Mixed Mode

	System Policy
	Interaction between System and Group Policy

Designing Group Policy Strategies

	Design basics
	Designing Group Policy application
	Testing and documenting Group Policy
	Best practices

This course has the following features:

	Exercises that allow users to practice in Windows 2000
	A file containing the text of the exercises
	Simulations that allow users to practice course skills, even if they don't have access to Windows 2000
	A glossary
	A Skill Assessment

	All courses in the series Windows 2000 Professional, a passing score on MCSE exam 70-210, or equivalent experience
	All courses in the series Windows 2000 Server MCSE 70-215, a passing score on MCSE exam 70-215, or equivalent experience
	All courses in the series Windows 2000 Network Administration MCSE 70-216, a passing score on MCSE exam 70-216, or equivalent experience
	All courses in the series Windows 2000 Active Directory MCSE 70-217, a passing score on MCSE exam 70-217, or equivalent experience
	Windows 2000 Security Design MCSE 70-220: Analyzing Business Requirements (W22001)
	Windows 2000 Security Design MCSE 70-220: Analyzing Technical Requirements (W22002)
	Windows 2000 Security Design MCSE 70-220: Establishing a Security Baseline (W22003)
	Windows 2000 Security Design MCSE 70-220: Planning Security for System Resources (W22004)
	Windows 2000 Security Design MCSE 70-220: Designing a Security Group Strategy (W22005)

	Windows 2000 Security Design MCSE 70-220: Protecting Resources with Auditing and Encryption (W22007)
	Windows 2000 Security Design MCSE 70-220: Using Native Windows 2000 Authentication (W22008)
	Windows 2000 Security Design MCSE 70-220: Using Alternate Authentication Strategies (W22009)
	Windows 2000 Security Design MCSE 70-220: Designing a Public Key Infrastructure (W22010)
	Windows 2000 Security Design MCSE 70-220: Designing Security for Network Services (W22011)
	Windows 2000 Security Design MCSE 70-220: Designing Security for Access between Networks (W22012)
	Windows 2000 Security Design MCSE 70-220: Designing Security for Communications Channels (W22013)

Microsoft® is a registered trademark of Microsoft Corporation.
Windows 2000® is a trademark of Microsoft Corporation.