-
A Group Policy Object (GPO) carries many settings that may then be linked to container locations at the site, domain, and organizational unit level. Each GPO may be linked to several container locations, with separate rights and permissions over the GPO's application configured for each link. -
Group Policy settings categories include Registry-based Policy, Security Settings, Software Restrictions, Software Distribution and Installation, Computer and User Scripts, Roaming User Profiles and Redirected Folders, Offline Folders, and Internet Explorer Maintenance. -
The Group Policy Management Console (GPMC) is a free downloadable add-in that brings together many Group Policy management functions into a single interface. It can be used to perform reporting, permissions testing and analysis, copying GPOs between forests, and the backup and restoration of versioned Group Policy settings. -
The GPMC can be used to calculate the Resultant Set of Policy (RSoP) to display all settings both explicitly assigned and inherited by a security principal. -
The Security Policy MMC snap-in allows management of the Security Policy settings, and can be used to create, import, and export security templates. Several templates are included during installation, such as Compatws.inf , DC Security.inf , Hisecdc.inf , Hisecws.inf , Rootsec.inf , Securedc.inf , Securews.inf , and Setup security.inf . -
Command-line tools are also provided for Security Policy setting manipulation, including Secedit , Gpupdate , and Gpresult .  |
