Scribd
Upload
218 views4 pages

Creating and Managing A Group Policy in Windows Server 2016 - Windowstechpro Site

This document discusses how to create and manage group policies in Windows Server 2016. It explains how to create a new group policy object (GPO) and link it to an organizational unit. It also describes how to edit a GPO's settings, such as password policies. Additionally, it covers blocking inheritance of policies, enforcing policies, and linking enabled policies to organizational units.

Uploaded by

ajilani2014
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
218 views4 pages

Creating and Managing A Group Policy in Windows Server 2016 - Windowstechpro Site

This document discusses how to create and manage group policies in Windows Server 2016. It explains how to create a new group policy object (GPO) and link it to an organizational unit. It also describes how to edit a GPO's settings, such as password policies. Additionally, it covers blocking inheritance of policies, enforcing policies, and linking enabled policies to organizational units.

Uploaded by

ajilani2014
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 4

5/27/2019 Creating and managing a Group Policy in Windows server 2016 | Windowstechpro Site

Windowstechpro Site

SERVER 2008, SERVER 2012, SERVER 2016, WINDOWS SERVER

CREATING AND MANAGING A GROUP POLICY


IN WINDOWS SERVER 2016
AUGUST 19, 2017 | VETRIVEL MADESWARAN | LEAVE A COMMENT

 264 total views, 38 views today

In this article, we see about How to create Group policy in windows server 2016. First open Group
Policy Management console by using server manager. By using GPM we can assign various polices for
Organizational units(OU). We show simple example to create GP.

Right click domain name and click to create GPO in this domain and link here.

Give a name for New GPO, we give Information Security and click OK.

https://windowstechpro.com/creating-and-managing-a-group-policy-in-windows-server-2016/ 1/4
5/27/2019 Creating and managing a Group Policy in Windows server 2016 | Windowstechpro Site

Right click Group Policy Object and click Edit.

Here we showing simple example for editing GPO, click policies-Windows settings-Security Settings-
Account polices-password Policy and click Maximum password age change password expire days and
click OK.

Click GPO and click Settings to check what are the policy enabled.

Block Inheritance Group Policy


To Block Inheritance of group policy to parent Organizational unit, it’s used to not apply any policy to
blocked inheritance. For Example Right click Organizational unit and click Block Inheritance

https://windowstechpro.com/creating-and-managing-a-group-policy-in-windows-server-2016/ 2/4
5/27/2019 Creating and managing a Group Policy in Windows server 2016 | Windowstechpro Site

We see now blocked Organizational units as BPO and Technical Dept.

Enforced Group policy

Enforcing Policy will take presence and apply to all the OUs followed in the Active Directory. which
means that Even you blocked any OU using the Block Inheritance, Enforce will take override of that
settings and apply the policy what ever enforced. So be careful, when selecting the Enforce has it will
override and apply which may cause issues if any OUs de ned and required different settings..
To enable Enforce, Right click GPO and select Enforced.

Link enabled GPO


Link enabled  that the group policy is linked to the OU. So the policy applies to the objects within the OU.
Right click GPO and select Link enabled.

https://windowstechpro.com/creating-and-managing-a-group-policy-in-windows-server-2016/ 3/4
5/27/2019 Creating and managing a Group Policy in Windows server 2016 | Windowstechpro Site

By Default Group Policy will take 90 Minutes of frequency to update to Clients which means client will
contact Active Directory every 90 Minutes to check any policy changes are there and update if any
changes or new Policies available and applicable for that particular client. If you want to update
immediately, We can us gpupdate /force in the clients which will do check and update.

BLOCK INHERITANCE ENFORCED GROUP POLICY GPO GROUP POLICY LINK ENABLED GPO

https://windowstechpro.com/creating-and-managing-a-group-policy-in-windows-server-2016/ 4/4

You might also like