Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

A new domain with a new domain controller for the engineering department was recently installed in the workplace. A GPO needs to be created to include various password policies, account lockout policies, audit policies, local user rights, and security options. The GPO has to be able to be applied to any organizational level within the domain, such as at the OU level or at the domain level itself. What steps must be taken to create the GPO and edit the appropriate settings in the GPO? Where can the policies be found within the GPO? All help is greatly appreciated, thanks.

share|improve this question
up vote 2 down vote accepted

First, if you really don't know anything about GPO, you probably shouldn't be editing them. It's quite easy to break all kinds of things by editing the wrong setting, or applying the wrong combination of settings.

On the domain controller, open Group Policy Management from Administrative Tools on the Start Menu. Find the Domain Policy in the tree on the left; right click it and select Edit.

For Password Policies find: Domain Policy\Computer Configuration\Windows Settings\Security Settings\ Account Policies.
Note that these settings will apply to Domain Accounts and Local Accounts on Computers.

Audit Policy, User Rights Assignment, and other Security Options find: Domain Policy\Computer Configuration\Windows Settings\Security Settings\Local Policies
Note that this will apply to all servers, all domain controllers, and all client computers in the domain.

If you don't want these settings to apply to all accounts and computers in the domain; you'll need to organize OUs, place the objects in those, and apply GPOs to those OUs. This is not a simple task and really should be done by someone who knows what they're doing.

share|improve this answer
Thank you very much I appreciate your time and feedback! – rlopez6570 Oct 7 '10 at 3:15

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.