How to create Custom GPOs

Group Policy is a feature of the Microsoft Windows NT family of operating systems. It controls the working environment of user accounts and computer accounts. Microsoft’s Group Policy Object (GPO) is a collection of Group Policy settings that defines what a system will look like and how it will behave for a defined group of users.

Requirements :-

  • Windows Server 2012 or above.

Steps :-

  • Login in to the Domain User account on the device.
  • To create a new GPO, you will need the Group Policy Management Console, which is present by default on domain controllers. It can also be installed as part of the Remote Server Administration Tools (RSAT).Group Policy Management ConsoleA similar window will appear when you will open the Group Policy Management Console window.
  • In the left pane of GPMC, expand the AD forest (in the above case, gpoadmin.net), Domains, and then the domain in which you want to create the new GPO.
  • Under the domain, right-click Group Policy Objects and select New from the menu.
  • In the New GPO dialog, give the GPO a name and click OK.
  • Expand the Group Policy Objects container in the left pane, right click your new GPO and select Edit from the menu.
  • A new window (Group Policy Management Editor) will open up so you can edit the policy according to your need.Group Policy Management Editor 
  • After editing the policy,  close the Group Policy Management Editor. You can back up your new GPO you configured in the previous steps from GPMC. To do this, right-click on the new GPO and select Back Up
  • After clicking on the Back Up option , select where your back-up should be saved, then click Back Up.
  • After you have the backed up GPO as a .zip file, you can follow the steps below to deploy the policy in your organization (with the help of Rippling)
    • Use this link to navigate to Hardware -> Advanced -> Profiles
    • Select the Profiles Tab
    • Click ADD PROFILES
    • Select Windows, and then you will be able to see the Profile Type option
    • Select GPO from the dropdown and enter the GPO Name
    • Upload the GPO (it should be in the format of a .zip file)
    • Enter the Profile Name, and add a description for the profile
    • Select the User Group for which the profile has to be deployed
    • Click Confirm to confirm the User Group
    • Click on Submit to deploy the profile

Profile installation takes about 5 minutes.

Issues? Ensure the device is connected to a working internet connection and whitelist app.rippling.com in the firewall.