Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

How do I apply my new default group policy?

Posted on 2016-08-15
7
Medium Priority
?
65 Views
Last Modified: 2016-08-17
I'm working on a VM and have created a new active directory.  I went into group policy and created a new default domain policy.
How do I apply this group policy to my domain?
0
Comment
Question by:Mary Macchioni
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 20

Assisted Solution

by:Russ Suter
Russ Suter earned 1000 total points
ID: 41756520
If it's the default domain policy then any PC joined to the domain should automatically receive that policy. However it's not guaranteed to be immediate. If you need to make sure the GP is immediately active then go to the client workstation, launch a command prompt as administrator, and type "gpupdate /force". You'll probably have to logoff or reboot for the changes to take full effect.
0
 
LVL 11

Accepted Solution

by:
Tim Edwards earned 1000 total points
ID: 41756521
1st thing is to never modify the default domain policy, always create new GPO specific to a certain function/policy that you want. If you need to have it on the domain level click right click on the domain and select 'Link Existing GPO' and select your newly created policy, this is the same approach if you want to have GPO assigned to specific OU's.

Please refer to this link for more information around GPO's and Management:

https://technet.microsoft.com/en-ca/library/hh147307(v=ws.10).aspx
0
 

Author Comment

by:Mary Macchioni
ID: 41756575
Tim,

Yes.  Right now we have a default domain policy on an active server.  I'm working on a VM which doesn't have any default group policy defined.  I don't want to play with our group policy/active directory on the network. Is there a way to copy or import from our active GPO server.  How can I do that?  

So this is what I need.  Copy or whatever our current AD/GPO settings to my virtual machine.  Then when I make new policies it will only affect the computers/user on that machine.  I hope I'm making sense because I'm so confused.
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:Mary Macchioni
ID: 41756576
Tim,

By the way, I've created my own domain.
0
 
LVL 20

Expert Comment

by:compdigit44
ID: 41758623
As Tim Edwards stated you cannot add or rename the Default Domain GP. AD looks for the GUID of this GP and could break thing if not present? Do you want to create a new GP for testing?
0
 

Author Comment

by:Mary Macchioni
ID: 41759175
That's what I'm doing.  I've made up a new test AD to test a new group policy.  I'm on a virtual machine with a 192.168.....  I think I'm going to have to just read up on this because it's a bit over my head.

Thank you for your assistance.
0
 
LVL 20

Expert Comment

by:compdigit44
ID: 41760234
here are the basic's..

1) When apply a GP you need to link it to the OU / domain where the computer is in
2) make sure authenticated uses has the read and apply GP permissions which is the default for a GP

Post a screen shot of you AD structure and of what you want the GP to configure on the workstation so I can better guide you.
0

Featured Post

NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

618 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question