In the Group Policy Management Console , click Group Policy Objects in the forest and domain in which you want to manage GPOs, click Delegation , and then configure the settings to meet the needs of your organization.
Click the user account of a Group Policy administrator, and then select the Approver check box to assign that role to the account. Clear the Editor check box. This role includes the Reviewer role. Click the user account of another Group Policy administrator, and then select the Editor check box to assign that role to the account. Click a third account and then select the Reviewer check box to assign only the Reviewer role to the account of that Group Policy administrator.
In an environment with multiple Group Policy administrators, those with the Editor role have the ability to request the creation of new GPOs, but such a request must be approved by someone with the Approver role because the creation of a new GPO impacts the production environment.
In this step, you use an account with the Editor role to request the creation of a new GPO. Using an account with the Approver role, you approve this request and complete the creation of a GPO.
Click Create live so the new GPO will be deployed to the production environment immediately upon approval. The new GPO is displayed on the Pending tab. Open the e-mail inbox for the account, and note that you have received an e-mail message from the AGPM alias with the Editor's request to create a GPO.
Click Yes to confirm approval of the creation of the GPO. The GPO is moved to the Controlled tab. You can use GPOs to configure computer or user settings and deploy them to many computers or users. For this scenario, you configure a setting in the GPO to require that the password be at least eight characters in length. For this scenario, configure the minimum password length:. In the properties window, select the Define this policy setting check box, set the number of characters to 8 , and then click OK.
To receive a copy of the request, type your e-mail address in the Cc field. In this step, you act as an Approver, creating reports and analyzing the settings and changes to settings in the GPO to determine whether you should approve them. After evaluating the GPO, you deploy it to the production environment and link it to a domain or an organizational unit OU so that it takes effect when Group Policy is refreshed for computers in that domain or OU. Any Group Policy administrator with the Reviewer role, which is included in all of the other roles, can review the settings in a GPO.
On the Contents tab in the details pane, click the Pending tab. In the History window, click the GPO version with the most recent timestamp. Click the Differences button. Click Yes. The GPO is deployed to the production environment. Click Close, and then OK. On the Apps screen, type gpedit. If you find the Group Policy Editor gpedit.
Upgrade to Windows 10 Pro or Enterprise. Step 2: Right click an OU to update. Click Start, click Run, type gpedit. Expand User Configuration, and then expand Administrative Templates. Type compmgmt. A list of directories for each type of certificate appears. How quickly will I get my solution? We can't guarantee quick solutions - Experts Exchange isn't a help desk. We're a community of IT professionals committed to sharing knowledge.
Our experts volunteer their time to help other people in the technology industry learn and succeed. Plans and Pricing. Contact Us. Certified Expert Program. Credly Partnership. Udemy Partnership. Privacy Policy.
0コメント