What is a GPO?

GPOs can be considered a store of the collection of individual policy settings that can be applied to the user and computer domain objects. These objects are much like a manifest document that holds and defines the individual policy settings that should be applied to objects for management and configuration in an automated, governed, and controlled manner.

GPOs can be one of the following two types:

• Local GPO: Windows OS computers have policies whose settings only apply to the local computer and cannot be linked to any other object; they are applicable for computers that are not AD joined.
• Domain GPO: These are created and stored on AD domain controllers. These GPOs can then be linked to a site, domain, and OU container objects (not groups) and provide central management of configuration settings that wish to be applied to user and computer objects in the domain.

There are two default policies created when AD DS is installed on Windows Server, and...