Edit a Group Policy Object
Applies To: Windows Server 2008
To edit a Group Policy object
In the Group Policy Management Console (GPMC) console tree, double-click Group Policy Objects in the forest and domain containing the Group Policy object (GPO) that you want to edit.
Right-click the GPO, and then click Edit.
In the console tree, edit the settings as appropriate.
Important
The Default Domain Policy GPO and Default Domain Controllers Policy GPO are vital to the health of any domain. As a best practice, you should not edit the Default Domain Controllers Policy GPO or the Default Domain Policy GPO, except in the following cases:
- It is required that account policy settings be configured in the Default Domain GPO.
- If you install applications on domain controllers requiring modifications to User Rights or Audit policy settings, you must modify the policy settings in the Default Domain Controllers Policy GPO.
Additional considerations
By default, only domain administrators, enterprise administrators, and members of the Group Policy creator owners group can edit GPOs.
To edit IPSec policy settings from within a GPO, you must be a member of the domain administrators group.
You can also edit a GPO by right-clicking the name of the GPO in any container in which it is linked, and then clicking Edit.