A. Windows 7 and Server 2008 R2 include Group Policy cmdlets that let you perform many group policy actions from PowerShell. To use them, start an elevated PowerShell console and import the grouppolicy module. Then use the New-GPO cmdlet with the name of the new GPO, as shown here.
I enter these commands:
Import-Module GroupPolicy New-GPO "Sales GPO"
and receive this output:
DisplayName : Sales GPO DomainName : savilltech.net Owner : SAVILLTECH\Domain Admins Id : d3672844-2875-4b72-a8c4-3df031149bb5 GpoStatus : AllSettingsEnabled Description : CreationTime : 12/28/2009 5:03:22 PM ModificationTime : 12/28/2009 5:03:23 PM UserVersion : AD Version: 0, SysVol Version: 0 ComputerVersion : AD Version: 0, SysVol Version: 0 WmiFilter :
You can also pass the name of a starter GPO using the -StarterGPOName switch.
Related Reading:
- Q: Does Windows provide a mechanism to enforce the auditing of all file system or registry object actions that specific users or groups perform on a Windows system or domain?
- Use Group Policy to Deploy Commonly Used IE Plug-Ins
- Review: Group Policy Management Tools
- How do I delegate permissions for someone to edit a GPO?
Check out hundreds more useful Q&As like this in John Savill's FAQ for Windows. Also, watch instructional videos made by John at ITTV.net.
0 comments
Hide comments
