Group Policy Survival Guide
This is a list of Group Policy resources. You can add resources you find useful, and/or rearrange the ones that are here, for example, by adding new sections.
What's going on
- Windows Server 2012 – The New and Improved Group Policy Management Console
- What’s new in Group Policy in Windows Server 2012 R2
- What’s new in Group Policy in Windows Server 2012
Concepts & How To
- Group Policy for Beginners
- Understanding Group Policy (pre-GPMC)
- Using Group Policy (pre-GPMC)
- How to (pre-GPMC)
- Controlling the Scope of Group Policy Objects using GPMC
- GPMC How To...
- Group Policy Preferences Overview
- Group Policy Preferences Frequently Asked Questions
- How to apply Group Policy objects to Terminal Services servers
- Group Policy processing and precedence
- Group Policy and Logon Impact: Foreground vs. background processing & Synchronous vs. asynchronous processing
- Group Policy Basics – Part 1: Understanding the Structure of a Group Policy Object
- Group Policy Basics – Part 2: Understanding Which GPOs to Apply
- Group Policy Basics – Part 3: How Clients Process GPOs
Planning & Deployment
- Planning and Deploying Group Policy
- Group Policy Design Best Practices
- Deploying Group Policy Using Windows Vista
- Optimizing Group Policy Performance
- Windows Server 2003 Deployment Kit, Designing a Managed Environment Book
- Planning a Managed Environment
- Designing a Group Policy Infrastructure
- Staging Group Policy Deployments
- Deploying Security Policy
- Deploying a Managed Software Environment
Technical References
- Core Group Policy Technical Reference
- Group Policy Components
- Administrative Templates Extension Technical Reference
- Group Policy Software Installation Extension Technical Reference
- Security Settings Extension Technical Reference
- IPSec Policy Extension Technical Reference
- Software Restriction Policies Technical Reference
- Scripts Extension Technical Reference
- Wireless Network Policies Extension Technical Reference
- Folder Redirection Extension Technical Reference
- Internet Explorer Maintenance Extension Technical Reference
- Remote Installation Services Extension Technical Reference
- Group Policy Settings Reference
- Group Policy ADMX Syntax Reference Guide
- Group Policy Management Console Reference
- Group Policy Preferences Guide
Documents
- Group Policy for Beginners
- Group Policy Settings Reference for Windows and Windows Server
- Windows Server 2012 Core Network Companion Guide: Group Policy Deployment
- Deploying VPN Connections by Using Windows Powershell and Group Policy
Troubleshooting
- TechNet Library: Troubleshooting Group Policy Using Event Logs
- TechNet Library: Troubleshooting Windows Server 2008 - Group Policy Events and Errors
- Application of Group Policy
- Group Policy Preprocessing (Active Directory)
- Group Policy Preprocessing (General)
- Group Policy Preprocessing (Networking)
- Group Policy Preprocessing (Security)
- Group Policy Preprocessing (WMI)
- Group Policy Reporting
- Group Policy Service
- Software Installation Processing
- Group Policy Scripts Processing
- Group Policy Registry Processing
- KB2002507: Information about Group Policy Preferences Events
- TechNet Library: Group Policy Troubleshooting
- Fixing Group Policy networking issues
- Fixing Group Policy processing issues
- Fixing Group Policy Scoping issues
- Fixing Group Policy structural issues
- Fixing Administrative Template policy setting problem
- Fixing Security Settings Problems
- Fixing Scripts policy settings problems
- Fixing Software Installation policy setting problems
- Fixing Folder Redirection policy setting problems
- Fixing Disk Quota extension problems
- Fixing Group Policy problems by using log files
- TechNet Magazine: Your Guide to Group Policy Troubleshooting
Download
Group Policy Management Console with Service Pack 1
-
Group Policy Preference Client Side Extensions
Administrative Templates
- Administrative Templates (ADMX) for Windows Server 2008
- Administrative Templates (ADMX) for Windows Server 2008 R2 and Windows 7
- Administrative Templates (.admx) for Windows 8 and Windows Server 2012
- Administrative Templates (.admx) for Windows 8.1 Update and Windows Server 2012 R2 Update
- Administrative Templates (.ADMX) for Windows 10
- Group Policy ADM Files
- Administrative Templates (ADMX) for Internet Explorer 9
- Administrative Templates (ADMX) for Internet Explorer 10
- Administrative Templates (ADMX) for Internet Explorer 11
- Office 2007 Administrative Template files (ADM, ADMX, ADML) and Office Customization Tool version 2.0
- Office 2013 Administrative Template files (ADMX/ADML) and Office Customization Tool
- Microsoft Desktop Optimization Pack Group Policy Administrative Templates
- Collection of Administrative Templates
Recommended Updates for Group Policy in Windows Client and Server Products
Tools
- Group Policy Management Console (GPMC): A new and comprehensive administrative tool for Group Policy management. GPMC integrates the existing Group Policy functionality of the property pages on the Active Directory administrative tools into a single, unified console dedicated to Group Policy management tasks; GPMC also expands management capabilities with new features.
- Gpresult: A tool that displays the Resultant Set of Policy (RSoP) information for a remote user and computer.
- Gpupdate: A tool that you can use to manually update any changes that are made to group policies (some changes can be made immediately.
- Gpotool: A tool that you can use to check the health of the Group Policy objects on domain controllers.
- Recreatedefpol.exe: A tool developed to restore the Default Domain policies in case of accidental deletion for Windows 2000. For the Windows Server 2003, please use Dcgpofix.exe instead (included in Windows Server 2003).
- Group Policy Inventory (GPInventory.exe): A tool allows administrators to collect Group Policy and other information from any number of computers in their network by running multiple Resultant Set of User Policy (RSOP) or Windows Management Instrumentation (WMI) queries. The query results can be exported to either an XML or a text file, and can be analyzed in Excel.
- Group Policy Search: Web app (hosted on Azure) allowing you to search all group policy settings available for Windows, Office and IE. E.G. search 'Wallpaper' to find all settings that relate to wallpaper
Windows Phone App - Search for Group Policy Search in the store or download the XAP and install manually - Search Connector for Windows Explorer - Search Group Policy Settings straight from Windows Explorer's search bar. Unfortunately, this points to the old site URL. Just open the OSDX file in notepad and change the URL to "http://gpsearch.azurewebsites.net/gps/rss.ashx?search={searchTerms}"
- Group Policy Log View: A utility that you can use to export Group Policy event data from the system and operational log into a text, HTML, or XML files. The supported operating system is Windows Vista.
- Policy Reporter V4: A free software from SysPro which formats the log provided in %systemRoot%\Debug\UserMode to give a more meaningful display. This latest version also displays the logs created when processing Preferences. It provides a tree structure on the left which shows major events reported in the Log. Selecting an entry in the tree structure displays that section of the log in the view window.
- Free GPOGuy tools A lot of interesting Toos like: command line remote GPO refresh, Group Policy Software Installation Viewer Utility, WMI Filter Validation Utility etc.
Blogs
- Group Policy Team Blog
- Blog posts tagged with Group Policy in AskDS
- Jeremy's GP Blog
- Group Policy Central
Forums
Useful KBs
- Userenv errors occur and events are logged after you apply Group Policy to computers that are running Windows Server 2003, Windows XP, or Windows 2000
- Group Policy Slow Link Detection Using Windows Vista and Server 2008
- Windows 7 Clients intermittently fail to apply group policy at startup
- Default Behavior for Group Policy Extensions with Slow Link
- Troubleshooting Group Policy Client-Side Extension Behavior
Scripts
- Group Policy Cmdlets in Windows PowerShell
- Learn About Scripting for Group Policy (Hey, Scripting Guy!)
- Blog posts tagged with Scripting in Group Policy Team blog
- Scripting Group Policy Tasks using GPMC
- TechNet Virtual Lab: Applying Group Policy
- TechNet Virtual Lab: MDOP: Advanced Group Policy Management (APGM)
- TechNet Virtual Lab: Managing a Domain Environment More Effectively
- TechNet Virtual Lab: MDOP: User State Virtualization (USV)
- TechNet Virtual Lab: Managing Internet Explorer 8 in the Enterprise
- TechNet Virtual Lab: Fine Grained Password Settings in Windows Server 2008 Beta 3
- Group Policy Management Console Scripting Samples
Hands On Lab
- TechNet Virtual Lab: Applying Group Policy
- TechNet Virtual Lab: MDOP: Advanced Group Policy Management (APGM)
- TechNet Virtual Lab: Managing a Domain Environment More Effectively
- TechNet Virtual Lab: MDOP: User State Virtualization (USV)
- TechNet Virtual Lab: Managing Internet Explorer 8 in the Enterprise
- TechNet Virtual Lab: Fine Grained Password Settings in Windows Server 2008 Beta 3
Books
- Windows Group Policy Resource Kit: Windows Server 2008 and Windows Vista
- Windows Group Policy Administrator's Pocket Consultant
- Microsoft Windows Group Policy Guide
- Group Policy: Fundamentals, Security, and the Managed Desktop
Trainings
Online Training
- Course 6719: Troubleshooting Group Policy Issues in Windows Server 2008
- Course 6178: Designing AD DS Group Policy in Windows Server 2008
- Course 6715: Configuring User Environments by Using Group Policy in Windows Server 2008
- Course 6716: Implementing Security by Using Group Policy in Windows Server 2008
- Course 6714: Configuring Group Policy Objects in Windows Server 2008
- Classroom Training
- Course 50255A: Managing, Maintaining, and Securing Your Networks Through Group Policy
Videos
- Administration and Configuration
- Windows Server 2008 R2 and Windows 7 Group Policy Changes
- What's new in Group Policy for Windows 7?
- Group Policy in Windows Vista
- Review Group Policy Features
- Configuring Group Policy
- Using Group Policy Preferences
- Using Group Policy to set default printers in Windows 7
- Power Management and Troubleshooting Group Policy
- Understanding Group Policy (Part 1 of 3)
- Understanding Group Policy (Part 2of 3)
- Understanding Group Policy (Part 3 of 3)
- Group Policy Preferences, Templates and Scripting
- Improving Desktop Security and Deployment (Part 6 of 7): Group Policy in Windows Vista
- Microsoft's Solutions for Windows Vista Management
- How do I series
- How do I: Configure The Central ADMX Store
- How do I: Windows 7/Server 08 R2 Software Restriction Policies
- How do I: Windows Server 2008 R2 Quick Look - Group Policy Management
- How do I: Use Group Policy Preferences to Manage Windows Vista Computers?
- How do I: Using Group Policy in Windows Vista and Windows Server 2008?
- How do I: Create a group policy to manage Windows Phone devices with System Center Mobile Device Manager 2008?
- How do I: Configuring and Using Advanced Group Policy Management
- Troubleshooting
- Networking Isolation
- Advanced Group Policy Management