Create a Group Policy Object

Applies To: Windows 7, Windows Essential Business Server, Windows SBS 2003, Windows SBS 2008, Windows Server 2000, Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2, Windows Server 2008, Windows Server 2008 R2, Windows Vista

To create a new GPO, use the Active Directory Users and Computers MMC snap-in.

Administrative credentials

To complete this procedure, you must be a member of the Domain Administrators group, or otherwise be delegated permissions to create new GPOs.

To create a new GPO

  1. On a computer that has the Group Policy Management feature installed, click Start, click Administrative Tools, and then click Group Policy Management.

  2. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.

  3. In the navigation pane, expand **Forest:**YourForestName, expand Domains, expand YourDomainName, and then click Group Policy Objects.

  4. Click Action, and then click New.

  5. In the Name text box, type the name for your new GPO.


Be sure to use a name that clearly indicates the purpose of the GPO. Check to see if your organization has a naming convention for GPOs.

  1. Leave Source Starter GPO set to (none), and then click OK.

  2. If your GPO will not contain any user settings, then you can improve performance by disabling the User Configuration section of the GPO. To do this, perform these steps:

    1. In the navigation pane, click the new GPO.

    2. In the details pane, click the Details tab.

    3. Change the GPO Status to User configuration settings disabled.

If you arrived at this page by clicking a link in a checklist, use your browser’s Back button to return to the checklist.