New ways to do familiar tasks using GPMC

  • Article

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

New ways to do familiar tasks

The following table lists common Group Policy tasks. Using Group Policy Management Console (GPMC), the procedures for performing these tasks are different from the way you performed these tasks in the past, without the Group Policy Management snap-in. Previously Administrators used Active Directory Users and Computers and Active Directory Sites and Services to manage Group Policy. Now you use GPMC to perform all Group Policy-related tasks.

If you want to On a computer without GPMC With Group Policy Management snap-in

Create a Group Policy object (GPO) and a link to it

On the Group Policy tab for a site, domain, or organizational unit, click New.

In GPMC, right-click the relevant site, domain, or organizational unit and then click Create and link a GPO here. For more information, see Create or delete a Group Policy object and Link a Group Policy object using GPMC.

Create an unlinked GPO

Navigate to the Group Policy properties tab for a site, domain, or organizational unit, click Add. On the All tab, right-click, and then click New.

In GPMC, navigate to Group Policy Objects, right-click it, and then click New. For more information, see Create or delete a Group Policy object.

Edit a GPO

Navigate to the Group Policy properties tab for a site, domain, or organizational unit, select the GPO, and then click Edit. This opens Group Policy Object Editor.

In GPMC, navigate to Group Policy Objects, right-click the GPO, and then click Edit. For more information, see Edit a Group Policy object from GPMC.

Note

  • Group Policy Object Editor MMC snap-in is still used to edit GPOs and is opened when you click Edit in GPMC.

Link an existing GPO to a site, domain, or organizational unit

Navigate to the Group Policy properties tab for a site, domain, or organizational unit, click Add, and then select a GPO.

In GPMC, navigate to a site, domain, or organizational unit, right-click it, and then click Link an existing GPO here. For more information, see Link a Group Policy object using GPMC.

Use security groups to filter the scope of policy

Edit the access control entry (ACE) permission option for Apply Group Policy on the Security tab in the Properties dialog box for the GPO.

In GPMC, click a GPO or GPO Link, select the Scope tab, and then use the Add and Remove buttons to control the groups, users, and computers on which the GPO applies. For more information, see Filter using security groups.

Delegate permissions on GPOs

Navigate to the properties of a GPO, click Permissions for Authenticated Users, and select the check boxes that correspond to the permissions you want to give.

In GPMC, click the GPO, click the Delegation tab, and then click the Add or Remove buttons. For more information, see Delegate Group Policy tasks.

Determine Resultant Set of Policy with Group Policy Results (logging mode)

In Resultant Set of Policy snap-in, right-click Resultant Set of Policy, and then click Generate RSoP Data. Select Logging Mode in the Resultant Set of Policy Wizard.

In GPMC, right-click Group Policy Results, and then click Group Policy Results Wizard. For more information, see Determine Resultant Set of Policy with Group Policy Results.

Simulate Resultant Set of Policy using Group Policy Modeling

In Resultant Set of Policy snap-in, right-click Resultant Set of Policy, and then click Generate RSoP Data. Select Planning Mode in the Resultant Set of Policy Wizard.

In GPMC, right-click Group Policy Modeling, and then click Group Policy Modeling Wizard. For more information, see Simulate Resultant Set of Policy using Group Policy Modeling.

Add a WMI filter

Navigate to the Properties of a Group Policy object, and click the WMI Filter tab.

In GPMC, right-click WMI Filters and click New. For more information, see Create, import, export, copy, and paste WMI filters.