Windows Server

Group Policy Object: What is Group Policy Object and how does it work

This is a hidden control panel that lets you set computer-level or user-level settings. If you’re a Systems Administrator, you can set group policies at your domain level, and then push them out to the clients on your network.

If you ever wanted to know what group policies are enabled or analyze GPO computer, see https://techdirectarchive.com/2020/02/09/how-to-analyze-group-policies-applied-to-a-user-account-and-device/

Group policy can be launched via “gpedit.msc” locally or just typing “gpedit” to launch the Local group policy console

Or via the run dialog box, search for “gpedit.msc”

 Each of the methods above will launch the “Local Group Policy Console” as shown below,

To launch Group Poly from the Domain controller,
– Under Tool,
– Search for Group Policy Management

For RSAT installation, sees https://techdirectarchive.com/2020/01/12/why-use-rsat-how-to-install-rsat/

Note: from Windows 10 1909, you do not have to install RSAT tool to have this tool installed on your PC.
– Launch the “Windows Settings” or via Win+I on your keyboard
– Click on Apps

– Click on Apps and Features and
– Click on optional features as shown below

Under Optional features
– Select RSAT: Group Policy Management Tools

Click on it and select install. In my case I have it installed already so it prompting me to uninstall it. This is how to have the tool uninstalled also from your Device (PC).

With Group Policy Object, administrators can administer (control) the number of PCs.  A set of Group Policy configurations is called a Group Policy Object (GPO).

The Group Policy Editor is the Local Group Policy Editor, which is used to enforce GPO’s and modify policies in standalone computers.

Note the following below on about GPO.

  • When you modify a Group Policy object, these changes are automatically applied to Registry. But, when you modify the Registry values while the Group Policy is forced, the value will be overwritten to its original state until the Group Policy Editor specifically makes the changes.
  • Group policy on Windows 10 periodically refreshes the Registry at certain intervals to keep the Registry values in check at all times which is an interval of 90 minutes.
  • For this reason, the GPO needs to be enforced as shown below For difference between GPUpdate and GPUpdate /force, see https://techdirectarchive.com/2020/02/26/all-about-gpupdate-switches-gpupdate-vs-gpupdate-force/

This tool can also be launched from PowerShell and Command Prompt as shown below

For some group policy implementations, see https://techdirectarchive.com/?s=gpo

I hope you found this blog post helpful. If you have any questions, please let me know in the comment session.

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments
0
Would love your thoughts, please comment.x
()
x