Add Test Devices to the Membership Group for a Zone
- Windows 10
- Windows Server 2016
Before you deploy your rules to large numbers of devices, you must thoroughly test the rules to make sure that communications are working as expected. A misplaced WMI filter or an incorrectly typed IP address in a filter list can easily block communications between devices. Although we recommend that you set your rules to request mode until testing and deployment is complete, we also recommend that you initially deploy the rules to a small number of devices only to be sure that the correct GPOs are being processed by each device.
Add at least one device of each supported operating system type to each membership group. Make sure every GPO for a specific version of Windows and membership group has a device among the test group. After Group Policy has been refreshed on each test device, check the output of the gpresult command to confirm that each device is receiving only the GPOs it is supposed to receive.
To complete these procedures, you must be a member of the Domain Administrators group, or otherwise be delegated permissions to modify the membership of the group for the GPO.
In this topic:
To add test devices to the GPO membership groups
Open Active Directory Users and Computers.
In the navigation pane, expand Active Directory Users and Computers, expand YourDomainName, and then expand the container that holds your membership group account.
In the details pane, double-click the GPO membership group to which you want to add devices.
Select the Members tab, and then click Add.
Type the name of the device in the text box, and then click OK.
Repeat steps 5 and 6 for each additional device account or group that you want to add.
Click OK to close the group properties dialog box.
After a device is a member of the group, you can force a Group Policy refresh on the device.
To refresh Group Policy on a device
From a elevated command prompt, run the following:
gpupdate /target:device /force
After Group Policy is refreshed, you can see which GPOs are currently applied to the device.
To see which GPOs are applied to a device
From an elevated command prompt, run the following:
gpresult /r /scope:computer