diff --git a/images/grouppolicy-paste.png b/images/grouppolicy-paste.png
new file mode 100644
index 0000000000..ba2de148f1
Binary files /dev/null and b/images/grouppolicy-paste.png differ
diff --git a/windows/security/threat-protection/windows-firewall/copy-a-gpo-to-create-a-new-gpo.md b/windows/security/threat-protection/windows-firewall/copy-a-gpo-to-create-a-new-gpo.md
index 89e08b0200..f1dfaa8500 100644
--- a/windows/security/threat-protection/windows-firewall/copy-a-gpo-to-create-a-new-gpo.md
+++ b/windows/security/threat-protection/windows-firewall/copy-a-gpo-to-create-a-new-gpo.md
@@ -43,6 +43,8 @@ To complete this procedure, you must be a member of the Domain Administrators gr
 
 4. In the navigation pane, right-click **Group Policy Objects** again, and then click **Paste**.
 
+  ![Screenshot that shows Copy Paste GPO.](/images/grouppolicy-paste.png)
+
 5. In the **Copy GPO** dialog box, click **Preserve the existing permissions**, and then click **OK**. Selecting this option preserves any exception groups to which you denied Read and Apply GPO permissions, making the change simpler.
 
 6. After the copy is complete, click **OK**. The new GPO is named **Copy of** *original GPO name*.
diff --git a/windows/security/threat-protection/windows-firewall/images/grouppolicy-paste.png b/windows/security/threat-protection/windows-firewall/images/grouppolicy-paste.png
new file mode 100644
index 0000000000..ba2de148f1
Binary files /dev/null and b/windows/security/threat-protection/windows-firewall/images/grouppolicy-paste.png differ