You can use the Group Policy Management Console (GPMC) to create and edit Group Policy objects (GPOs).

Creating and editing a Group Policy object

Note

You can also create a GPO from a Starter GPO. For more information, see Create a New GPO from a Starter GPO.
To create a Group Policy object

  1. In the GPMC console tree, right-click Group Policy Objects in the forest and domain in which you want to create a GPO.

  2. Click New.

  3. In the New GPO dialog box, specify a name for the new GPO, and then click OK.

To edit a Group Policy object

  1. In the GPMC console tree, double-click Group Policy Objects in the forest and domain containing the GPO that you want to edit.

  2. Right-click the GPO, and then click Edit.

  3. In the console tree, edit the settings as appropriate.

    Important

    The Default Domain Policy GPO and Default Domain Controllers Policy GPO are vital to the health of any domain. As a best practice, you should not edit the Default Domain Controllers Policy GPO or the Default Domain Policy GPO, except in the following cases:

    • Account policy settings are required to be configured in the Default Domain GPO.

    • If you install applications on domain controllers requiring modifications to User Rights or Audit policy settings, you must modify the policy settings in the Default Domain Controllers Policy GPO.

Additional considerations

  • When you create a GPO, it will not have an effect until it is linked to a site, domain, or organizational unit (OU).

  • By default only domain administrators, enterprise administrators, and members of the Group Policy creator owners group can create and edit GPOs.

  • To edit IPSec policy settings from within a GPO, you must be a member of the domain administrators group.

  • You can also edit a GPO by right-clicking the name of the GPO in any container in which it is linked, and then clicking Edit.

Additional references

Working with Group Policy Objects

Table Of Contents