Manage GPOs - MCSA Windows Server 2012 R2: Installation and Configuration Study Guide - page 303

account the various needs of your users and the parts of your organization, you can often
determine a logical and efficient method of creating and applying GPOs. Although it's rare
that you'll come across a right or wrong method of implementing Group Policy settings,
you will usually encounter some that are either better or worse than others.
By implementing a logical and consistent set of policies, you'll also be well prepared
to troubleshoot any problems that might come up or to adapt to your organization's
changing requirements. Later in this chapter, you'll learn about some specific methods for
determining effective Group Policy settings before you apply them.

Implementing Group Policy

Now that I've covered the basic layout and structure of group policies and how they work,
let's look at how you can implement them in an Active Directory environment. In the fol-
lowing sections, you'll start by creating GPOs. Then you'll apply these GPOs to specific
Active Directory objects, and you'll take a look at how to use administrative templates.

Creating GPOs

In Windows Server 2000 and Windows Server 2003, you could create GPOs from many
different locations. For example, you could use Active Directory Users and Computers to
create GPOs on your OUs along with other GPO tools. In Windows Server 2012 R2, things
are simpler. You can create GPOs for OUs in only one location: the Group Policy Manage-
ment Console (GPMC). You have your choice of three applications for setting up policies
on your Windows Server 2012 R2 computers.
Local Computer Policy Tool This administrative tool allows you to quickly access
the Group Policy settings that are available for the local computer. These options apply
to the local machine and to users who access it. You must be a member of the local
Administrators group to access and make changes to these settings.
Administrators may need the ability to work on multiple local group policy objects
(MLGPOs) at the same time. To do this, you would complete the following steps. (You
can't configure MLGPOs on domain controllers.)
1.

Open the MMC by typing MMC in the Run command box.

2.

Click File and then click Add/Remove Snap-in.

3.

From the available snap-ins list, choose Group Policy Object Editor and click Add.

4.

In the Select Group Policy Object dialog box, click the Browse button.

5.

Click the Users tab in the Browse For The Group Policy Object dialog box.

6.

Click the user or group for which you want to create or edit a local Group Policy and
click OK.

7.

Click Finish and then click OK.

8.

Configure the multiple policy settings.