Note that the GPO is enabled ( Link Enabled = True ), which means that its settings apply to all objects within a given OU.

Select Edit to change the GPO settings.

This will open the GPO Editor console similar to the local GPO editor. Note that all GPO settings are divided into two sections:

• Computer Configuration – here you can configure the Windows (computer) settings;
• User Configuration – contains settings that apply to the computer user.

There are three subsections in each section::

• Software Settings – used to install and update MSI packages via the GPO;
• Windows Settings — contains the basic Windows security settings: password policy settings, account lockouts, audit policy, user rights assignments, etc.;
• Administrative Templates – contains various Windows components’ parameters for both built-in Windows administrative templates and ADMX templates installed by the administrator (for example, Microsoft Office ADMX templates or Google Chrome administrative templates). We recommend that you use the Group Policy Central Store for ease of administration.

Close the Policy Editor now and go back to the GPMC. Any settings you have configured in the GPO will be applied to the clients the next time the Group Policy settings are updated.

Select your GPO to display its parameters. There are 4 tabs available here:

• Scope – shows the OUs to which the policy is assigned. In the Security Filtering section, you can configure which security groups the policy should apply to (the default setting here is Authenticated Users, which means that the policy applies to all objects in the OU). Under WMI filtering you can set additional rules to filter objects for GPOs to apply (see WMI filters in GPO);
• Details – contains basic information about the GPO (owner when created and modified, version, GUID);
• Settings – provides a report of all configured GPO options similar to the results of the gpresult command;
• Delegation – displays the current GPO permissions and allows you to change them.

Active Directory stores GPOs as a set of files and folders in the SYSVOL directory, which is replicated between DCs. You can find the directory of a particular GPO by its GUID in the Details tab. Use the following UNC path: \\woshub.com\sysvol\woshub.com\Policies\{GUID}.

If you no longer want the policy to apply to clients in this OU, you can either remove the link (click Delete, note that the GPO itself will not be deleted) or temporarily disable it ( Link Enabled = False ).

Note that there are already two predefined GPOs in the domain that apply to all the computers and to the domain controllers, respectively:

• Default Domain Policy
• Default Domain Controller Policy

In most cases, using these GPOs to configure client settings is not recommended. Instead, you should create new policies and assign them at the level of the entire domain or Domain Controllers container.

Other options offered by the Group Policy Management console include:

• Import/export, backup, and restore GPOs
• Generate Resultant Set of Policy (RSoP) reports
• Remotely update GPO settings on computers
• Prepare GPOs for cross-domain migration

You may also want to read the article “Why can’t I apply group policy to my computer?” which discusses the basic elements of Active Directory Group Policies, such as

• Group Policy Inheritance
• Scope and application of GPOs (LSDOU)
• Policy application management and prioritization
• Group Policy Loopback Processing mode
• GPO filtering
• GPO enforcement

Please look closely at this article to better understand Group Policies and how they work.