This guide explains how to edit a new GPO in various ways through Group Policy Management. It is a continuation from How to create and link a GPO to a domain.
Prerequisite: Only members in the Domain Admins, Enterprise Admins, or Group Policy Creator Owners groups have the ability to create new Group Policy Objects (GPOs) and edit existing ones.
How to Access Options of GPO
To access the options for the GPO, right click on it (in our case, Suppliers_GPO) and select Edit from the drop down list.
On the Scope tab page of the details pane, options display for applying security filtering and for linking the GPO to a WMI filter. The sites, domains, and OUs that are linked to the GPO can also be viewed.
Block GPO inheritance at the domain level
Right click the domain where the relevant GPO is contained (for our example, the domain is CloudBT.com) and select Block Inheritance from the drop down list.
The container of the domain now displays an exclamation mark, meaning that inheritance has been blocked at this level.
Apply Security Filtering to the GPO
For our example, we want to apply policies in the Suppliers GPO to members of the Finance group.
Navigate to Suppliers_GPO and select the Add button in the Security Filtering section.
Type in Finance in the Enter the object name to select text box and select the Check Names button. Click OK to continue.
Security filtering is now set to apply the GPO to the Finance group.
Linking GPO to a WMI Filter
Right click the WMI Filter folder for the relevant domain (in our case, CloudBT.com) and select New… from the drop down list.
Enter in Suppliers_filter under the Name text box, and click the Add button to continue.
The WMI Query dialog box appears. You can retain the default Namespace or type in an alternate one if you prefer. For our example, we decide to leave the default Namespace.
For the Query text box, you need to type in conditions so that the Suppliers GPO applies only to computers in the Finance group that belong to the Win32_ComputerSystem class. In the query, root\CIMv2 specifies the namespace in which the class is stored. In our case, we type the following:
SELECT *FROM Win32+ComputerSystem WHERE Name = “Finance”
If you are fine with the settings, click OK to continue.
You are returned to the New WMI Query dialog box which lists the new query. Click Save.
The WMI filter has now been generated. To link the filter to the GPO, select Suppliers_filter from the drop-down list in the WMI Filtering section.
A message box requests you confirm that you would like to change the WMI filter to Suppliers_filter. Click Yes to continue.
The specified WMI filter will now be used for the new GPO.
For some further GPO configuring instructions s in Group Policy Management, navigate to How to configure a GPO in Group Policy Management – Part 2.