INFORMATION SECURITY IMPROVEMENT WITH INTRODUCTION GROUP POLICIES IN A LARGE COMPANY

Raziskava obravnava predlog za uvedbo skupinskih politik v veliko podjetje. Predstavili smo teoretična izhodišča s področja skupinskih politik. Opisali smo tako osnovno delovanje skupinskih politik kot tudi varnostne nastavitve, ki bistveno vplivajo na povečanje informacijske varnosti. Predstavljene so dobre prakse in priporočila pri vpeljavi skupinskih politik v veliko podjetje. Dobre prakse se nanašajo na samo pripravo okolja za vpeljavo skupinskih politik in tudi na specifične nastavitve posameznih skupinskih politik. Izdelali smo predlog za odvzem administratorskih pravic, pripravo testnega okolja, pripravo skupin uporabnikov in predlog strukture organizacijskih enot v aktivnem imeniku. Predvideni učinki uvedbe skupinskih politik v veliko podjetje so predvsem povečanje varnosti informacijskega sistema, poenostavitev upravljanja, skrajšanje časa za upravljanje, zmanjšanje števila napak in večja preglednost nastavitev informacijskega sistema.The master\u27s thesis presents a proposal for the group policy introdution in a large company. We have presented the theoretical basis regardings the group policy. We have described the basic group policy operations as well as the security settings, which can significant impact on the increase of information security. We have described the best practices for the group policy implementation to the large company. Best practices relate to the environment preparation for the group policy implementation as well as to specific settings for a individual group policy. We have prepared a poposal for the administrator rights removal, preparation of user groups, and we have proposed a structure of organizational units in the active directory. The focus of proposal was on the security settings. We have shown that the successful implementation of the group policy significantly increase the level of information security in the enterprise. Other expected impacts of introducing the group policy in a large company are mainly the following: simplified and less time consuming management, less system errors, and better transparency of information system settings