Active Directory Group Policy lets administrators apply consistent user and computer settings across a domain. The Group Policy Management Console, opened with gpmc.msc, is the main workspace for managing Group Policy Objects (GPOs).
Install and open GPMC
On Windows 10 and 11, GPMC is included with RSAT and can be installed from Optional Features. On Windows Server, add Group Policy Management through Server Manager. Open the console from Administrative Tools or run gpmc.msc.
Create and link a GPO
GPMC displays the forest, domain, and organizational-unit structure. To create and link a GPO in one operation, right-click the target OU and select the appropriate option. Edit it in two primary areas:
- Computer Configuration: settings for computers.
- User Configuration: settings for users.
Both areas commonly include Software Settings, Windows Settings, and Administrative Templates. A GPO can link at the site, domain, or OU level; the link location defines its potential scope.
Review scope and changes
Use Scope to review links, security filtering, and WMI filtering. Settings provides a policy report, and Delegation shows permissions. Disabling a link stops application through that link; deleting it does not delete the GPO.
Practical takeaway
Incorrect links or filters can affect more objects than intended. Keep new policies separate from default GPOs, back up important policies, document links and filters, and test changes on a controlled OU before broad deployment.