Group Policy Management tips for IT pros in Windows

This article provides you the information about common administration and troubleshooting tasks and tools associated with Group Policy in Windows 7/8/10.

Common tasks: These links will take you to additional information about the following tasks on the Microsoft Web site.

Useful tools:

This section describes the Microsoft Web site downloads and tools associated with this version of Windows that help you configure and manage Group Policy.

1. Local Group Policy Editor: Local Group Policy Editor is a Microsoft Management Console (MMC) snap-in that you can use to edit local Group Policy objects (GPOs). Local Group Policy Editor and the Resultant Set of Policy snap-in are available in Windows Server 2008 R2 and Windows 7.

  • You can find this MMC snap-in in the following location: %windir%\System32\gpedit.msc
  • To open the Local Group Policy Editor, click Start, click Run and then type gpedit.msc.

2. Group Policy Management Console: To manage domain Group Policy across an enterprise, you must first install the Group Policy Management Console (GPMC). The GPMC consists of a MMC snap-in and a set of scriptable interfaces for managing Group Policy. The GPMC is included with Remote Server Administration Tools (RSAT), To download click here.

RSAT enables IT administrators to remotely manage roles and features in Windows Server 2008 R2 from a computer that is running Windows 7. RSAT includes support for the remote management of computers that are running either a Server Core installation or the full installation option of Windows Server 2008 R2.

Note: Installing RSAT does not automatically install the GPMC. To install the GPMC after you install RSAT, follow these steps:

  1. Open Programs & Features in Control Panel and click Turn Windows features on or off.
  2. Expand Remote Server Administration Tools in Windows features list, expand Feature Administration Tools and select the Feature Administration Tools and Group Policy Management Tools check boxes.

It may be necessary to run MMC with elevated privileges even if your account is in the Computer Administrators group. To open MMC with elevated privileges:

  1. Click Start, click All Programs, click Accessories, right-click Command Prompt and then point to Run as administrator.
  2. If Windows displays a security message asking your permission to run this program, click Allow.
  3. In the command prompt that opens, type mmc.exe to start MMC. In the console tree of MMC, click File, click Add/Remove Snap-in, and then select Group Policy Object Editor and click Add.

3. Windows PowerShell Group Policy cmdlets: Windows PowerShell is a Windows command-line shell and scripting language that you can use to automate many of the same tasks that you perform in the user interface by using the Group Policy Management Console (GPMC). To help you perform these tasks, Group Policy provides more than 25 cmdlets. Each cmdlet is a simple, single-function command-line tool. You can use the Group Policy cmdlets to perform the following tasks for domain-based Group Policy objects (GPOs):

  • Maintaining GPOs: GPO creation, removal, backup, and import.
  • Associating GPOs with Active Directory® containers: Group Policy link creation, update, and removal.
  • Setting inheritance flags and permissions on Active Directory organizational units (OUs) and domains.
  • Configuring registry-based policy settings and Group Policy Preferences Registry settings: Update, retrieval, and removal.
  • Creating and editing Starter GPOs.

To use the Windows PowerShell Group Policy cmdlets, you must be running either Windows Server on a domain controller or on a member server that has the GPMC installed, or Windows with Remote Server Administration Tools (RSAT) installed. RSAT includes the GPMC and its cmdlets.

You must also use the Import-Module grouppolicy command to import the Group Policy module before you use the cmdlets at the beginning of every script that uses them and at the beginning of every Windows PowerShell session.

You can use the GPRegistryValue cmdlets to change registry-based policy settings and the GPPrefRegistryValue cmdlets to change registry preference items. For information about the registry keys that are associated with registry-based policy settings, download this Group Policy Settings Reference Spreadsheet.

For more information about the Group Policy cmdlets, you can use the Get-Help<cmdlet-name> and Get-Help<cmdlet_name>-detailed cmdlets to display basic and detailed Help.

Downloads: For Group Policy downloads, go to the following resources on the Microsoft Web site:

Deployment: For information about deploying Group Policy, go to the following resources on the Microsoft Web site.

Operations: For operational information about Group Policy, go to the following procedures on the Microsoft Web site.

Technical reference: For more information about Group Policy, go to the following technical references on the Microsoft Web site.

Other Useful Links:

Sourced from Microsoft.

Go here to learn about Filter Options in Local Group Policy Editor in Windows.

Posted by on , in Category Windows with Tags
Nitin Agarwal is an MVP alumni and a Pro Blogger. He was awarded as Most Valuable Professional for 3 times by Microsoft in Windows Expert - Consumer category. He is immensely inspired by Bill Gates, Steve Jobs and APJ Abdul Kalam.