Windows 10 includes a new Group Policy feature that lets you manage settings and preferences for multiple users on a single computer. You can use Group Policy to configure settings such as the desktop background, browser history, and default apps. To use Group Policy, you first need to create a group policy object (GPO). A GPO is a template for setting up your computer. You can create a GPO by using the Windows PowerShell command gpedit.msc. Once you have created a GPO, you can use it to apply settings to individual users or groups of users on your computer. To create a GPO, open the Windows PowerShell command prompt and type the following command: gpedit.msc You will see the following window: gpedit.msc - The Windows PowerShell console window where you can manage Group Policy objects (GPOs) on your computer. To get started with Group Policy, see “Getting Started with Group Policy” in the Microsoft TechNet Library at http://go.microsoft.com/fwlink/?LinkId=255441 . To learn more about using Windows PowerShell for managing your computer, see “Windows PowerShell for Administrators” at http://go.microsoft.com/fwlink/?LinkId=278871 . Note that some features of Group Policy are not available in all editions of Windows 10; see “Limitations of Using Group Policy” later in this article for more information about which editions support which features of Group Policy.) In this example, we will create an empty GPO named “Default Domain Policies.” To do this, click the plus sign (+) next to Default Domain Policies and then enter the name of your new GPO in the dialog box that appears: In this example, we will create an empty GPO named “Default Domain Policies.” To do this, click themenu ..
Group Policy is a Windows feature that contains a variety of advanced settings, particularly for network administrators. However, local Group Policy can also be used to adjust settings on a single computer.
Group Policy isn’t designed for home users, so it’s only available on Professional, Ultimate, and Enterprise versions of Windows.
Centralized Group Policy
If you’re using a Windows computer in an Active Directory environment, Group Policy settings can be defined on the domain controller. Network administrators have one place where they can configure a variety of Windows settings for every computer on the network. These settings can also be enforced, so users can’t change them. For example, using group policy, a network administrator can block access to certain sections of the Windows control panel, or set a specific website as the home page for every computer on the network.
This can be useful for locking down computers, restricting access to specific folders, control panel applets, and applications. It can also be used to change a variety of Windows settings, including ones that can’t be changed from the control panel or require registry tweaks to change.
Many Group Policy settings actually change registry values in the background – in fact, you can see which registry value a group policy setting changes. However, Group Policy provides a more user-friendly interface and the ability to enforce these settings.
Local Group Policy
Group Policy isn’t only useful for networks of computers in businesses or schools, however. If you’re using a Professional version of Windows, you can use the local Group Policy Editor to change Group Policy settings on your computer.
Using Group Policy, you can tweak some Windows settings that aren’t normally available from the graphical interface. For example, if you want to set a custom login screen in Windows 7, you can either use the Registry Editor or the Group Policy Editor – it’s easier to change this setting in the Group Policy Editor. You can also tweak other areas of Windows 7 with the Group Policy Editor — for example, you can hide the notification area (also known as the system tray) entirely.
The local Group Policy Editor can also be used to lock down a computer, just as you’d lock down a computer on an enterprise network. This can be useful if you have children using your computer. For example, you can allow users to run only specific programs, restrict access to specific drives, or enforce user account password requirements, including setting a minimum length for passwords on the computer.
Using Local Group Policy
To access the local Group Policy Editor on your Windows computer (assuming you’re using a Professional edition of Windows or better, not a Home version), open the Start menu, type gpedit.msc, and press Enter.
If you don’t see the gpedit.msc application, you’re using a Home edition of Windows.
You probably shouldn’t dig through the Group Policy Editor and look for settings to change, but if you see an article on the web recommending you change a Group Policy setting to achieve a specific goal, this is where you can do it.
Group Policy settings are broken up into two sections – the Computer Configuration section controls computer-specific settings, while the User Configuration section controls user-specific settings.
For example, Internet Explorer settings are located under Administrative Templates\Windows Components\Internet Explorer
You can change a setting by double-clicking it, selecting a new option, and clicking OK.
This is just scratching the surface of what you can do with Group Policy – we’ve also covered enabling auditing from the Group Policy editor to see who logged into your computer and when.
You should now have a better understanding of Group Policy, what you can do with it, and how it differs from the registry editor, which isn’t designed for easy editing of settings by hand.
