mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-21 17:57:22 +00:00
60 lines
1.9 KiB
Markdown
60 lines
1.9 KiB
Markdown
---
|
|
title: Create a Group Policy Object (Windows)
|
|
description: Learn how to use the Active Directory Users and Computers MMC snap-in to create a GPO. You must be a member of the Domain Administrators group.
|
|
ms.assetid: 72a50dd7-5033-4d97-a5eb-0aff8a35cced
|
|
ms.reviewer: jekrynit
|
|
ms.author: paoloma
|
|
ms.prod: windows-client
|
|
ms.mktglfcycl: deploy
|
|
ms.sitesec: library
|
|
ms.pagetype: security
|
|
ms.localizationpriority: medium
|
|
author: paolomatarazzo
|
|
manager: aaroncz
|
|
audience: ITPro
|
|
ms.collection:
|
|
- M365-security-compliance
|
|
- highpri
|
|
ms.topic: conceptual
|
|
ms.date: 09/07/2021
|
|
ms.technology: itpro-security
|
|
appliesto:
|
|
- ✅ <b>Windows 10</b>
|
|
- ✅ <b>Windows 11</b>
|
|
- ✅ <b>Windows Server 2016</b>
|
|
- ✅ <b>Windows Server 2019</b>
|
|
- ✅ <b>Windows Server 2022</b>
|
|
---
|
|
|
|
# Create a Group Policy Object
|
|
|
|
|
|
To create a new GPO, use the Active Directory Users and Computers MMC snap-in.
|
|
|
|
**Administrative credentials**
|
|
|
|
To complete this procedure, you must be a member of the Domain Administrators group, or otherwise be delegated permissions to create new GPOs.
|
|
|
|
To create a new GPO
|
|
|
|
1. Open the Group Policy Management console.
|
|
|
|
2. In the navigation pane, expand **Forest:**<em>YourForestName</em>, expand **Domains**, expand *YourDomainName*, and then click **Group Policy Objects**.
|
|
|
|
3. Click **Action**, and then click **New**.
|
|
|
|
4. In the **Name** text box, type the name for your new GPO.
|
|
|
|
> [!NOTE]
|
|
> Be sure to use a name that clearly indicates the purpose of the GPO. Check to see if your organization has a naming convention for GPOs.
|
|
|
|
5. Leave **Source Starter GPO** set to **(none)**, and then click **OK**.
|
|
|
|
6. If your GPO will not contain any user settings, then you can improve performance by disabling the **User Configuration** section of the GPO. To do this, perform these steps:
|
|
|
|
1. In the navigation pane, click the new GPO.
|
|
|
|
2. In the details pane, click the **Details** tab.
|
|
|
|
3. Change the **GPO Status** to **User configuration settings disabled**.
|