Active Directory Domain Services 2008 : Create Group Policy Objects, Delete Group Policy Objects, Create Starter GPOs, Delete Starter GPOs

Create Group Policy Objects

Scenario/Problem: You need to enforce consistent security settings across a number of member servers.

Solution: Create a group policy object (GPO).

To create a group policy object, perform the following steps:

1.	Log on to a domain controller or a member computer that has Windows Server 2008 Remote Server Administration Tools (RSAT) installed.
2.	Click Start, click Administrative Tools, and then click Group Policy Management.
3.	In the console tree, navigate to the domain where you want to create the GPO, right-click the Group Policy Objects node, and click New.
4.	In the New GPO window, shown in Figure 1, type a name for the GPO in the Name field and click OK. Figure 1. The New GPO window.

Delete Group Policy Objects

Scenario/Problem: You previously used a GPO to apply security settings. The GPO is no longer required.

Solution: Delete a GPO.

To delete a group policy object, perform the following steps:

1.	Log on to a domain controller or a member computer that has Windows Server 2008 RSAT installed.
2.	Click Start, click Administrative Tools, and then click Group Policy Management.
3.	In the console tree, navigate to the domain that contains the GPO to delete; then select Group Policy Objects.
4.	Right-click the GPO you want to delete, and select Delete.
5.	Select Yes to confirm the deletion of the GPO on the confirmation window shown in Figure 2. Figure 2. The confirmation to delete a GPO.

Create Starter GPOs

Scenario/Problem: Your company needs a baseline GPO that can be used to create incremental GPOs in your forest.

Solution: Create a starter GPO.

To create a starter GPO, perform the following steps:

1.	Log on to a domain controller or a member computer that has Windows Server 2008 RSAT installed.
2.	Click Start, click Administrative Tools, and then click Group Policy Management.
3.	In the console tree, navigate to the domain in which you want to create the starter GPO, and select the Starter GPOs node.
4.	If you have not previously created starter GPOs in this domain, you need to first create the Starter GPOs folder in the domain. In the details pane, click Create Starter GPOs Folder, shown in Figure 3. Figure 3. The Create Starter GPOs Folder button.
5.	Right-click the Starter GPOs node in the console tree, and select New.
6.	In the New Starter GPO window, shown in Figure 4, type a name for the starter GPO in the Name field; then click OK. Figure 4. The New Starter GPO window.

Delete Starter GPOs

Scenario/Problem: Your company previously created a starter GPO that is no longer required.

Solution: Delete a starter GPO.

To delete a starter GPO, perform the following steps:

1.	Log on to a domain controller or a member computer that has Windows Server 2008 RSAT installed.
2.	Click Start, click Administrative Tools, and then click Group Policy Management.
3.	In the console tree, navigate to the domain in which you want to delete the starter GPO, and select the Starter GPOs node.
4.	Right-click the starter GPOs you want to delete, and click Delete.
5.	Click OK to confirm the deletion of the GPO, shown in Figure 5. Figure 5. Deleting a starter GPO.