Group Policy Overview
Published: February 29, 2012
Updated: August 19, 2012
Applies To: Windows 8, Windows Server 2012
This topic describes the Group Policy feature in Windows Server 2012 and Windows 8.
Use this topic to find the documentation resources and other technical information you need to accomplish key Group Policy tasks, new or updated functionality in this version compared to previous versions of Group Policy and ways to automate common Group Policy tasks using Windows PowerShell.
Did you mean…
-
Firewall settings, see Windows Firewall with Advanced Security Overview
-
GPupdate command (gpupdate.exe), see Refresh Group Policy settings with GPUpdate.exe
-
Group Policy for Windows Server 2008 R2 and Windows 7, see Overview of Group Policy (Windows Server 2008 R2)
-
Group Policy Settings for Windows Server 2012 and Windows 8, see Group Policy Settings Reference for Windows Server 2012 and Windows 8
-
Preferences, see http://go.microsoft.com/fwlink/p/?linkid=216977
-
Manage Group Policy from your desktop, see Remote Server Administration Tools for Windows Server "8" Beta
-
Security settings, see Security Policy Settings Overview
-
Secedit.exe /refreshpolicy, see Refresh Group Policy settings with GPUpdate.exe
Group Policy is an infrastructure that allows you to specify managed configurations for users and computers through Group Policy settings and Group Policy Preferences. For Group Policy settings that affect only a local computer or user, you can use the Local Group Policy Editor. You can manage Group Policy settings and Group Policy Preferences in an Active Directory Domain Services (AD DS) environment through the Group Policy Management Console (GPMC). Group Policy management tools also are included in the Remote Server Administration Tools pack to provide a way for you to administer Group Policy settings from your desktop.
Whenever the GPMC is installed, whether on servers or client computers, the Windows PowerShell module is also installed. You have full Windows PowerShell functionality. If you install the Remote Server Administration Tools pack, the latest Windows PowerShell cmdlets for Group Policy are also installed. For more information about Windows PowerShell cmdlets and scripts that you can use to manage Group Policy, see Group Policy Cmdlets.
You can also configure the Group Policy feature by using Windows PowerShell cmdlets. For more information about using Server Manager cmdlets to install the Group Policy Management Console for the Group Policy feature, see Install or Uninstall Roles, Role Services, or Features and Server Manager deployment cmdlet module.
Using Group Policy, you can significantly reduce an organization’s total cost of ownership. Various factors, such as the large number of policy settings available, the interaction between multiple policies, and inheritance options, can make Group Policy design complex. By carefully planning, designing, testing, and deploying a solution based on your organization’s business requirements, you can provide the standardized functionality, security, and management control that your organization needs.
Here are some Windows Server 2012 scenarios that use Group Policy to implement a solution:
Group Policy design can become very complex. Various factors, such as the large number of policy settings and preference items available, the interaction between multiple policies, and inheritance options, can make it difficult to determine if Group Policy is functioning correctly on each computer.
In Windows Server 2012, Group Policy changes, as detailed below, are focused on improving the Group Policy troubleshooting experience. For more details about these changes, as well as additional changes in functionality that are not listed here, see What's New in Group Policy.
| Feature/functionality | New or Updated? | Description |
|---|---|---|
|
New |
Schedule a remote Group Policy update (gpupdate.exe) for one or many computers. |
|
|
Updated |
Group Policy Results now includes more information to highlight the different functionality that may alter how Group Policy is applied to a computer or user. |
|
|
New |
Display the status of Active Directory and SYSVOL replication as it relates to Group Policy. |
| Content type | References |
|---|---|
|
Planning |
Not yet available. |
|
Deployment |
Not yet available. |
|
Operations |
Not yet available. |
|
Troubleshooting |
|
|
Security |
Not yet available. |
|
Tools and settings |
|
|
Community resources |
|
|
Related technologies |
Not yet available. |
