Share via

Deciphering group policy sections

Jim 291 Reputation points
2024-05-08T19:32:04.51+00:00

Server 2022. Windows 11 clients

I'm working on setting up GPO's for a small company of around 40 users. I'm confused about the layout of the GPM interface and how to utilize the editor. This is the layout:

User's image

So if I want to say, add a printer to everybody's client, which "Default Domain Policy" would I edit?

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,247 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Marcin Policht 13,020 Reputation points MVP
    2024-05-08T19:46:30.46+00:00

    Default Domain Policy.

    It appears twice - as a link to the domain (the first one on the list) and as a GPO (under the Group Policy Objects) folder. You can use either entry to launch Group Policy Editor interface - ultimately you are editing the same object regardless of which you choose.

    Default Domain Controllers Policy GPO is separate from Default Domain Policy GPO - it applies to domain controllers, not domain member servers

    If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

    hth

    Marcin

  2. Ian Xue (Shanghai Wicresoft Co., Ltd.) 31,016 Reputation points Microsoft Vendor
    2024-05-09T01:38:25.3133333+00:00

    Hi Jim,

    Thank you for posting in Q&A.

    All the GPOs in your domain can be found under Group Policies Objects. If you link a GPO to a site, domain, or OU, a shortcut will be created under it. By default, the GPO Default Domain Policy is created and linked to the domain while Default Domain Controller Policy is created and linked to folder Domain Controllers. Opening the shortcuts is the same as opening the GPOs under Group Policies Objects.

    To add a printer to every domain computer, it is recommended to create a new GPO and link it to the domain instead of modifying the existing Default Domain Policy.

    Hope this helps.

    Best Regards,

    Ian Xue

    If the Answer is helpful, please click "Accept Answer" and upvote it.