In this lecture, we are going to edit the settings or the configuration of Group Policy Objects.

Open Group Policy Management Console window.

Let's edit Test GPO 3 that we created earlier:

Steps:

1. Let's go ahead and Right Click on the GPO and hit Edit...

2. Here we have both Computer and User Configuration. The left-hand side is the navigation pane, the right-hand side is the content.

Now, you might be wondering how do you know if you are going to use a Computer or User configuration, and the answer depends on what you are linking the GPO to.

3. Let's say if we link this to an OU that only uses Computers, we would use Computers Configuration, this depends on the objects in use. Therefore if there are only computers, then only computer changes will take effect. On the other hand, if we have an OU with both users and computers, we can make changes to either and they would apply based on the type.
4. Inside of these windows, we have Policies and Preferences, or both.

Most of the settings are the same, but not every single one. These are based on Object Types for example Folder Redirection, this is a User-based configuration and not a Computer-based configuration.

5. For example, under Control Panel Settings we can set up Printers, and set Power Options. These work on both and are very similar. Let's take a look at Power Options:

Select Power Options. In the right window click New.

6. Now we can set a power plan, and these same options can be done on a user basis. For example, admins never sleep, but if we want certain laptops to sleep, we would make a user and a computer policy.

7. Let's configure one setting as an example. Under Computer Configuration > Policies > Windows Settings > Security Settings > Event log.

Let's say we wanted to prevent Guests accounts from accessing the Application log :

The Prevent local guests group from accessing the application log policy is currently undefined. Right-click and select Properties, and then see the settings. We can then define this, for example, let's select Disabled:

As we can see it is Disabled now and our policy now shows Disabled. The same goes for Enabled.

8. Now if we minimize the window and click on the GPO Test 3 and click on the Settings tab now we have data. We can see the option we just have configured.

That is how you edit settings in GPO. There are tons of settings you can choose from. A quick search in a google search engine will show walkthroughs on settings you want to configure.

Server Academy Members Only

Want to access this lesson? Just sign up for a free Server Academy account and you'll be on your way. Already have an account? Click the Sign Up Free button to get started..

Sign In Sign Up Free