Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Applies To: Windows 8, Windows Server 2008 R2, Windows Server 2012
You can use the Group Policy Management Console (GPMC) to create and edit Group Policy objects (GPOs).
Creating and editing a Group Policy object
Create a Group Policy object
Edit a Group Policy object
Note
You can also create a GPO from a Starter GPO. For more information, see Create a New GPO from a Starter GPO.
To create a Group Policy object
In the GPMC console tree, right-click Group Policy Objects in the forest and ___domain in which you want to create a GPO.
Click New .
In the New GPO dialog box, specify a name for the new GPO, and then click OK .
To edit a Group Policy object
In the GPMC console tree, double-click Group Policy Objects in the forest and ___domain containing the GPO that you want to edit.
Right-click the GPO, and then click Edit .
In the console tree, edit the settings as appropriate.
Important
The Default Domain Policy GPO and Default Domain Controllers Policy GPO are vital to the health of any ___domain. As a best practice, you should not edit the Default Domain Controllers Policy GPO or the Default Domain Policy GPO, except in the following cases:
- Account policy settings are required to be configured in the Default Domain GPO.
- If you install applications on ___domain controllers requiring modifications to User Rights or Audit policy settings, you must modify the policy settings in the Default Domain Controllers Policy GPO.
Additional considerations
When you create a GPO, it will not have an effect until it is linked to a site, ___domain, or organizational unit (OU).
By default only ___domain administrators, enterprise administrators, and members of the Group Policy creator owners group can create and edit GPOs.
To edit IPSec policy settings from within a GPO, you must be a member of the ___domain administrators group.
You can also edit a GPO by right-clicking the name of the GPO in any container in which it is linked, and then clicking Edit .