Edit a Group Policy Object

Applies To: Windows Server 2008

To edit a Group Policy object

  1. In the Group Policy Management Console (GPMC) console tree, double-click Group Policy Objects in the forest and domain containing the Group Policy object (GPO) that you want to edit.

  2. Right-click the GPO, and then click Edit.

  3. In the console tree, edit the settings as appropriate.


The Default Domain Policy GPO and Default Domain Controllers Policy GPO are vital to the health of any domain. As a best practice, you should not edit the Default Domain Controllers Policy GPO or the Default Domain Policy GPO, except in the following cases:

  - It is required that account policy settings be configured in the Default Domain GPO.  
  - If you install applications on domain controllers requiring modifications to User Rights or Audit policy settings, you must modify the policy settings in the Default Domain Controllers Policy GPO.  

Additional considerations

  • By default, only domain administrators, enterprise administrators, and members of the Group Policy creator owners group can edit GPOs.

  • To edit IPSec policy settings from within a GPO, you must be a member of the domain administrators group.

  • You can also edit a GPO by right-clicking the name of the GPO in any container in which it is linked, and then clicking Edit.

Additional references

Work with Group Policy Objects