1. Creating a Group Policy Object
The installation of Windows SBS creates an Active Directory
domain that includes a default domain policy, a default Domain
Controllers policy, and several policies specifically for Small
Business Server. When you need to set up a GPO of your own, follow these steps:
Select Group Policy Management from the Administrative Tools
menu, and navigate to the container to which you want the new GPO
to apply.
Right-click the domain, site, or OU; and select Create A GPO
In This Domain, And Link It Here.
In the New GPO dialog box, type in a name for the Group
Policy Object and click OK.
Right-click the new GPO and select Edit to launch the Group
Policy Object Editor.
Specify settings for the GPO. When you’re finished, close
the Group Policy Object Editor.
In the Group Policy Management Console, right-click the
domain name or the OU this GPO is to be associated with and select
Link An Existing GPO.
In the Select GPO dialog box, select the GPO to link and
click OK.
To shorten the process by one step, you can also right-click the
domain or OU; and select Create A GPO In This Domain, And Link It Here.
Note:
Try to keep the total number of GPOs as low as possible. The
processing of each GPO takes time, and too many objects can slow
logons and logoffs. The number of settings within a GPO doesn’t
matter—it’s the total number of GPOs.
When you create a new GPO or edit an existing one, the Group
Policy Object Editor is automatically launched. In the console tree,
two nodes—Computer Configuration and User Configuration—display.
Under each node are extensions for Software Settings, Windows
Settings, and Administrative Templates.
Use the Computer Configuration folders to customize policies
for computers on the network. These policies go into effect when the
computer is turned on and the operating system starts. Settings in
these folders apply to any user who logs on to the computer. For
example, if you have computers in a training room for which you want
to enforce a strict environment, the Computer Configuration node is
where you configure those settings.
The User Configuration node contains settings for customizing
environments or setting policies for users on the network. User
Configuration policies come into play when a specific user logs on
to the network.
2. Deleting a Group Policy Object
To delete a GPO, right-click it in the Group Policy Management
Console and select Delete. When you delete a GPO, all links to the GPO
will also be deleted. Be sure that you are logged on with an account
that has sufficient permissions.
Neither the Default Domain Policy nor the Default Domain
Controllers Policy can be deleted.
