{"id":341,"title":"GPO ile Ortak Klas\u00f6rleri Domain \u0130\u00e7indeki T\u00fcm Client'lara Otomatik Olarak Da\u011f\u0131tma","content":"<p>Active Directory ortamlar\u0131nda ortak klas&ouml;rlerin y&ouml;netimi, IT ekipleri i&ccedil;in s\u0131kl\u0131kla kar\u015f\u0131la\u015f\u0131lan bir zorluktur. Manuel olarak her bilgisayara gidip ortak klas&ouml;r eklemek hem zaman kayb\u0131d\u0131r hem de y&ouml;netilebilirlik a&ccedil;\u0131s\u0131ndan s&uuml;rd&uuml;r&uuml;lebilir bir y&ouml;ntem de\u011fildir. Bu yaz\u0131da, Group Policy (GPO) kullanarak ortak klas&ouml;rleri merkezi olarak nas\u0131l da\u011f\u0131taca\u011f\u0131n\u0131z\u0131 ve bu s&uuml;re&ccedil;te dikkat etmeniz gereken kritik noktalar\u0131 detayl\u0131ca ele alaca\u011f\u0131z.<\/p>\n<h2>Neden GPO ile Ortak Klas&ouml;r Da\u011f\u0131t\u0131m\u0131?<\/h2>\n<p>Manuel y&ouml;ntemlerin getirdi\u011fi operasyonel y&uuml;k, b&uuml;y&uuml;yen organizasyonlarda katlanarak artar. GPO tabanl\u0131 yakla\u015f\u0131m sayesinde:<\/p>\n<ul>\n<li><strong>Merkezi y&ouml;netim<\/strong> ile t&uuml;m de\u011fi\u015fiklikler tek noktadan yap\u0131l\u0131r<\/li>\n<li><strong>Tutarl\u0131l\u0131k<\/strong> sa\u011flanarak t&uuml;m kullan\u0131c\u0131lar ayn\u0131 yap\u0131land\u0131rmay\u0131 al\u0131r<\/li>\n<li><strong>G&uuml;venlik politikalar\u0131<\/strong> merkezi olarak uygulan\u0131r<\/li>\n<li><strong>Zaman tasarrufu<\/strong> ile IT ekibinin verimlili\u011fi artar<\/li>\n<li><strong>Hata riski<\/strong> minimuma indirilir<\/li>\n<\/ul>\n<h2>File Server &Uuml;zerinde Ortak Klas&ouml;r Haz\u0131rl\u0131\u011f\u0131<\/h2>\n<p>\u0130lk ad\u0131m, payla\u015f\u0131lacak klas&ouml;r&uuml;n do\u011fru \u015fekilde yap\u0131land\u0131r\u0131lmas\u0131d\u0131r. G&uuml;venlik ve eri\u015filebilirlik dengesi burada kritik &ouml;neme sahiptir.<\/p>\n<h3>Klas&ouml;r Yap\u0131s\u0131 Olu\u015fturma<\/h3>\n<pre><code>D:\\Ortak\\\n    \u251c\u2500\u2500 Departmanlar\\\n    \u2502   \u251c\u2500\u2500 Muhasebe\n    \u2502   \u251c\u2500\u2500 \u0130nsan_Kaynaklari\n    \u2502   \u2514\u2500\u2500 IT\n    \u2514\u2500\u2500 Genel\\\n        \u251c\u2500\u2500 Duyurular\n        \u2514\u2500\u2500 Formlar\n<\/code><\/pre>\n<h3>Payla\u015f\u0131m Yap\u0131land\u0131rmas\u0131<\/h3>\n<p>Payla\u015f\u0131m adland\u0131rmas\u0131nda gizli payla\u015f\u0131m i&ccedil;in <code>$<\/code> karakteri kullan\u0131labilir:<\/p>\n<ul>\n<li>Normal payla\u015f\u0131m: <code>\\\\FileServer\\Departman<\/code><\/li>\n<li>Gizli payla\u015f\u0131m: <code>\\\\FileServer\\Departman$<\/code><\/li>\n<\/ul>\n<p><strong>Share Permissions ayarlar\u0131:<\/strong><\/p>\n<ul>\n<li>Everyone &rarr; Read (Temel okuma eri\u015fimi)<\/li>\n<li>Domain Users &rarr; Change veya Modify (Kullan\u0131c\u0131 ihtiya&ccedil;lar\u0131na g&ouml;re)<\/li>\n<li>Domain Admins &rarr; Full Control<\/li>\n<\/ul>\n<p><strong>NTFS \u0130zinleri (Daha detayl\u0131 kontrol i&ccedil;in):<\/strong><\/p>\n<ul>\n<li>Authenticated Users &rarr; Read &amp; Execute<\/li>\n<li>\u0130lgili departman gruplar\u0131 &rarr; Modify<\/li>\n<li>CREATOR OWNER &rarr; Full Control (Sadece kendi dosyalar\u0131 i&ccedil;in)<\/li>\n<li>Domain Admins &rarr; Full Control<\/li>\n<\/ul>\n<h2>Active Directory'de G&uuml;venlik Gruplar\u0131n\u0131n Olu\u015fturulmas\u0131<\/h2>\n<p>Eri\u015fim kontrol&uuml;n&uuml; kolayla\u015ft\u0131rmak i&ccedil;in AD'de mant\u0131ksal gruplar olu\u015fturun:<\/p>\n<pre><code>GRP_OrtakKlasor_Muhasebe_Read\nGRP_OrtakKlasor_Muhasebe_Modify\nGRP_OrtakKlasor_IT_FullControl\nGRP_OrtakKlasor_Genel_Read\n<\/code><\/pre>\n<p>Bu yakla\u015f\u0131m\u0131n avantajlar\u0131:<\/p>\n<ul>\n<li>Kullan\u0131c\u0131 ekleme\/&ccedil;\u0131karma i\u015flemleri grup &uuml;zerinden yap\u0131l\u0131r<\/li>\n<li>\u0130zin de\u011fi\u015fiklikleri an\u0131nda uygulan\u0131r<\/li>\n<li>Denetim (audit) kolayla\u015f\u0131r<\/li>\n<\/ul>\n<h2>GPO Olu\u015fturma ve Yap\u0131land\u0131rma<\/h2>\n<h3>GPO Olu\u015fturma Ad\u0131mlar\u0131<\/h3>\n<ol>\n<li><strong>Group Policy Management Console<\/strong> a&ccedil;\u0131n<\/li>\n<li>\u0130lgili OU'ya sa\u011f t\u0131klay\u0131n &rarr; <strong>Create a GPO in this domain, and Link it here<\/strong><\/li>\n<li>GPO ad\u0131: <code>GPO - Ortak Klasor Dagitimi<\/code><\/li>\n<li>Olu\u015fturulan GPO'ya sa\u011f t\u0131klay\u0131n &rarr; <strong>Edit<\/strong><\/li>\n<\/ol>\n<h3>Drive Mapping Yap\u0131land\u0131rmas\u0131<\/h3>\n<pre><code>User Configuration \n  &rarr; Preferences \n    &rarr; Windows Settings \n      &rarr; Drive Maps\n<\/code><\/pre>\n<p>Yeni Drive Map eklerken dikkat edilecekler:<\/p>\n<p><strong>General Sekmesi:<\/strong><\/p>\n<ul>\n<li>Action: <strong>Create<\/strong> (\u0130lk kurulum) veya <strong>Replace<\/strong> (G&uuml;ncelleme)<\/li>\n<li>Location: <code>\\\\FileServer\\Departman$<\/code><\/li>\n<li>Label as: <code>Ortak - Departman<\/code><\/li>\n<li>Drive Letter: <strong>H:<\/strong> (&Ccedil;ak\u0131\u015fma olmamas\u0131 i&ccedil;in kontrol edin)<\/li>\n<li>Connect as: Bo\u015f b\u0131rak\u0131n (Kullan\u0131c\u0131 kimlik bilgileriyle ba\u011flanacak)<\/li>\n<\/ul>\n<p><strong>Common Sekmesi:<\/strong><\/p>\n<ul>\n<li>Run in logged-on user's security context: <strong>\u0130\u015faretli<\/strong><\/li>\n<li>Item-level targeting: <strong>\u0130\u015faretli<\/strong> (Hedefleme i&ccedil;in)<\/li>\n<\/ul>\n<h2>Item-Level Targeting ile Hassas Hedefleme<\/h2>\n<p>Item-level targeting, GPO'nun yaln\u0131zca belirli kriterlere uyan kullan\u0131c\u0131lara uygulanmas\u0131n\u0131 sa\u011flar.<\/p>\n<h3>Hedefleme Kriterleri &Ouml;rnekleri:<\/h3>\n<p><strong>G&uuml;venlik Grubu Bazl\u0131:<\/strong><\/p>\n<pre><code>Target: Security Group\nGroup: DOMAIN\\GRP_OrtakKlasor_Muhasebe_Modify\n<\/code><\/pre>\n<p><strong>Departman Bazl\u0131 (OU):<\/strong><\/p>\n<pre><code>Target: Organizational Unit\nOU: OU=Muhasebe,OU=Departmanlar,DC=sirket,DC=local\n<\/code><\/pre>\n<p><strong>Karma Hedefleme (AND\/OR mant\u0131\u011f\u0131):<\/strong><\/p>\n<pre><code>IF Member of GRP_OrtakKlasor_Read\nAND Computer Name like \"PC-MUH*\"\nTHEN Apply this setting\n<\/code><\/pre>\n<h2>GPO Uygulama ve Test S&uuml;reci<\/h2>\n<h3>Test Ortam\u0131nda Do\u011frulama<\/h3>\n<ol>\n<li>Test OU'su olu\u015fturun ve GPO'yu buraya linkleyin<\/li>\n<li>Test kullan\u0131c\u0131s\u0131 ile oturum a&ccedil;\u0131n<\/li>\n<li>A\u015fa\u011f\u0131daki komutlar\u0131 &ccedil;al\u0131\u015ft\u0131r\u0131n:<\/li>\n<\/ol>\n<pre><code class=\"language-powershell\"># GPO'yu manuel tetikleme\ngpupdate \/force\n\n# GPO uygulanma durumunu kontrol\ngpresult \/r\n\n# Detayl\u0131 GPO raporu (HTML format\u0131nda)\ngpresult \/h C:\\GPOReport.html\n<\/code><\/pre>\n<h3>Sorun Giderme Komutlar\u0131<\/h3>\n<pre><code class=\"language-powershell\"># Mapped drive'lar\u0131 listele\nnet use\n\n# Event log kontrol&uuml;\nGet-EventLog -LogName Application -Source \"Group Policy Drive Maps\"\n\n# GPO i\u015fleme detaylar\u0131\ngpresult \/z &gt; C:\\DetailedGPOReport.txt\n<\/code><\/pre>\n<h2>\u0130leri D&uuml;zey Yap\u0131land\u0131rmalar<\/h2>\n<h3>Dinamik De\u011fi\u015fkenler Kullan\u0131m\u0131<\/h3>\n<p>GPO'da ortam de\u011fi\u015fkenleri kullanarak dinamik yap\u0131lar olu\u015fturabilirsiniz:<\/p>\n<ul>\n<li><code>%USERNAME%<\/code> - Kullan\u0131c\u0131 ad\u0131<\/li>\n<li><code>%USERDOMAIN%<\/code> - Domain ad\u0131<\/li>\n<li><code>%COMPUTERNAME%<\/code> - Bilgisayar ad\u0131<\/li>\n<li><code>%LOGONSERVER%<\/code> - Oturum a&ccedil;\u0131lan DC<\/li>\n<\/ul>\n<p>&Ouml;rnek kullan\u0131m:<\/p>\n<pre><code>\\\\FileServer\\Kullanicilar\\%USERNAME%\n<\/code><\/pre>\n<h3>Script Tabanl\u0131 Alternatif<\/h3>\n<p>Daha karma\u015f\u0131k senaryolar i&ccedil;in PowerShell script'i GPO ile da\u011f\u0131t\u0131labilir:<\/p>\n<pre><code class=\"language-powershell\"># MapDrives.ps1\n$drives = @{\n    'H:' = '\\\\FileServer\\Departman'\n    'I:' = '\\\\FileServer\\Genel'\n    'P:' = \"\\\\FileServer\\Kullanicilar\\$env:USERNAME\"\n}\n\nforeach ($drive in $drives.GetEnumerator()) {\n    New-PSDrive -Name $drive.Key.TrimEnd(':') `\n                -PSProvider FileSystem `\n                -Root $drive.Value `\n                -Persist -Scope Global\n}\n<\/code><\/pre>\n<h2>G&uuml;venlik ve Performans &Ouml;nerileri<\/h2>\n<h3>G&uuml;venlik En \u0130yi Uygulamalar\u0131<\/h3>\n<ol>\n<li><strong>En az yetki prensibi:<\/strong> Kullan\u0131c\u0131lara sadece ihtiya&ccedil; duyduklar\u0131 eri\u015fimi verin<\/li>\n<li><strong>D&uuml;zenli denetim:<\/strong> Access logs'lar\u0131 d&uuml;zenli kontrol edin<\/li>\n<li><strong>\u015eifreleme:<\/strong> Hassas veriler i&ccedil;in EFS veya BitLocker kullan\u0131n<\/li>\n<li><strong>DFS kullan\u0131m\u0131:<\/strong> Y&uuml;k dengeleme ve yedekleme i&ccedil;in DFS namespace tercih edin<\/li>\n<\/ol>\n<h3>Performans Optimizasyonu<\/h3>\n<ul>\n<li><strong>Offline Files:<\/strong> S\u0131k kullan\u0131lan dosyalar i&ccedil;in aktifle\u015ftirin<\/li>\n<li><strong>Bant geni\u015fli\u011fi y&ouml;netimi:<\/strong> QoS politikalar\u0131 uygulay\u0131n<\/li>\n<li><strong>Site bazl\u0131 da\u011f\u0131t\u0131m:<\/strong> Farkl\u0131 lokasyonlar i&ccedil;in farkl\u0131 file server'lar kullan\u0131n<\/li>\n<\/ul>\n<h2>Yayg\u0131n Sorunlar ve &Ccedil;&ouml;z&uuml;mleri<\/h2>\n<h3>Sorun: Drive harfi &ccedil;ak\u0131\u015fmas\u0131<\/h3>\n<p><strong>&Ccedil;&ouml;z&uuml;m:<\/strong> GPO'da \"Replace\" action kullan\u0131n veya farkl\u0131 harf atay\u0131n<\/p>\n<h3>Sorun: Yava\u015f ba\u011flant\u0131<\/h3>\n<p><strong>&Ccedil;&ouml;z&uuml;m:<\/strong> DFS-R kullanarak yerel replikasyon yap\u0131n<\/p>\n<h3>Sorun: \u0130zin hatalar\u0131<\/h3>\n<p><strong>&Ccedil;&ouml;z&uuml;m:<\/strong> Effective permissions kontrol&uuml; yap\u0131n:<\/p>\n<pre><code class=\"language-powershell\">icacls \"\\\\FileServer\\Departman\" \/verify \/t\n<\/code><\/pre>\n<p>GPO ile ortak klas&ouml;r da\u011f\u0131t\u0131m\u0131, modern Active Directory ortamlar\u0131nda vazge&ccedil;ilmez bir y&ouml;netim arac\u0131d\u0131r. Do\u011fru yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131nda hem g&uuml;venlik hem de kullan\u0131labilirlik a&ccedil;\u0131s\u0131ndan optimal sonu&ccedil;lar elde edilir. Yukar\u0131da anlatt\u0131\u011f\u0131m ad\u0131mlar\u0131 takip ederek, organizasyonunuzda merkezi, g&uuml;venli ve &ouml;l&ccedil;eklenebilir bir dosya payla\u015f\u0131m altyap\u0131s\u0131 kurabilirsiniz.<\/p>\n<p>Unutmay\u0131n ki her organizasyonun kendine &ouml;zg&uuml; ihtiya&ccedil;lar\u0131 vard\u0131r. Bu temel yap\u0131y\u0131 kendi gereksinimlerinize g&ouml;re &ouml;zelle\u015ftirerek, daha verimli bir IT altyap\u0131s\u0131 olu\u015fturabilirsiniz. Test ortam\u0131nda deneyler yaparak &uuml;retim ortam\u0131na ge&ccedil;meden &ouml;nce t&uuml;m senaryolar\u0131 test etmenizi &ouml;nemle tavsiye ederim.<\/p>\n<hr>\n<p><em>Bu makale, Windows Server 2019\/2022 ve Active Directory Domain Services ortamlar\u0131 i&ccedil;in haz\u0131rlanm\u0131\u015ft\u0131r. Farkl\u0131 versiyonlarda k&uuml;&ccedil;&uuml;k farkl\u0131l\u0131klar olabilir.<\/em><\/p>","excerpt":"Active Directory ortamlar\u0131nda ortak klas\u00f6rlerin y\u00f6netimi, IT ekipleri i\u00e7in s\u0131kl\u0131kla kar\u015f\u0131la\u015f\u0131lan bir zorluktur. Manuel olarak her bilgisayara gidip ortak klas\u00f6r eklemek hem zaman kayb\u0131d\u0131r hem de y\u00f6netilebilirlik a\u00e7\u0131s\u0131ndan s\u00fcrd\u00fcr\u00fclebilir bir y\u00f6ntem de\u011fildir. Bu yaz\u0131da, Group Policy (GPO) kullanarak ortak klas\u00f6rleri merkezi olarak nas\u0131l da\u011f\u0131taca\u011f\u0131n\u0131z\u0131 ve bu s\u00fcre\u00e7te dikkat etmeniz gereken kritik noktalar\u0131 detayl\u0131ca ele alaca\u011f\u0131z.","created_at":"2025-11-25 16:08:00","updated_at":"2026-09-08 04:18:57","category_id":6,"view_count":474,"reading_time":6,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-11-25 13:08:00","featured_image":"45475b5e2a23555d3482d1a65bdf6831.jpg","slug":"gpo-ile-ortak-klasorleri-domain-icindeki-tum-client-lara-otomatik-olarak-dagitma","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"}