1 300 737 205

How to Configure a GPO in Group Policy Management

This guide explains how to edit a new GPO in various ways through Group Policy Management. It is a continuation from How to create and link a GPO to a domain.

Prerequisite: Only members in the Domain Admins, Enterprise Admins, or Group Policy Creator Owners groups have the ability to create new Group Policy Objects (GPOs) and edit existing ones.

 

How to Access Options of GPO

To access the options for the GPO, right click on it (in our case, Suppliers_GPO) and select Edit from the drop down list.

1_Edit_a_GPO

On the Scope tab page of the details pane, options display for applying security filtering and for linking the GPO to a WMI filter. The sites, domains, and OUs that are linked to the GPO can also be viewed.

2_Edit_a_GPO

 

Block GPO inheritance at the domain level

Right click the domain where the relevant GPO is contained (for our example, the domain is CloudBT.com) and select Block Inheritance from the drop down list.

3_Edit_GPO

The container of the domain now displays an exclamation mark, meaning that inheritance has been blocked at this level.

4_Edit_a_GPO

 

Apply Security Filtering to the GPO

For our example, we want to apply policies in the Suppliers GPO to members of the Finance group.

Navigate to Suppliers_GPO and select the Add button in the Security Filtering section.

5_Edit_a_GPO

Type in Finance in the Enter the object name to select text box and select the Check Names button. Click OK to continue.

Edit_a_GPO_-_Security_Filtering

Security filtering is now set to apply the GPO to the Finance group.

 

Linking GPO to a WMI Filter

Right click the WMI Filter folder for the relevant domain (in our case, CloudBT.com) and select New… from the drop down list.

6_Edit_a_GPO_-_Security_Filtering

Enter in Suppliers_filter under the Name text box, and click the Add button to continue.

8_Edit_a_GPO_-_Security_Filtering

The WMI Query dialog box appears. You can retain the default Namespace or type in an alternate one if you prefer. For our example, we decide to leave the default Namespace.

For the Query text box, you need to type in conditions so that the Suppliers GPO applies only to computers in the Finance group that belong to the Win32_ComputerSystem class. In the query, root\CIMv2 specifies the namespace in which the class is stored. In our case, we type the following:

SELECT *FROM Win32+ComputerSystem WHERE Name = “Finance”

9_Edit_a_GPO_-_Security_Filtering

If you are fine with the settings, click OK to continue.

You are returned to the New WMI Query dialog box which lists the new query. Click Save.

The WMI filter has now been generated. To link the filter to the GPO, select Suppliers_filter from the drop-down list in the WMI Filtering section.

10_Edit_a_GPO_-_Security_Filtering

A message box requests you confirm that you would like to change the WMI filter to Suppliers_filter. Click Yes to continue.

The specified WMI filter will now be used for the new GPO.

 

For some further GPO configuring instructions s in Group Policy Management, navigate to How to configure a GPO in Group Policy Management – Part 2.

Request Your Free Consultation Today

We’ll come to your place of business, and give you a full diagnostic snapshot of your IT systems.