6.2. The Birth, Life, and Death of a GPO

Now that you understand where GPOs actually live, we can take the next step: understanding the "journey" of a GPO. Specifically, a GPO is born and must stay healthy if it's going to stay alive. If its usefulness becomes depleted, you can call in the Sopranos boys to whack it—never to be seen again.

6.2.1. How Group Policy Objects Are "Born"

Before you can give birth to GPOs, you need rights to do so, and you can get these rights in two ways. First, you can be a member of the Group Policy Creator Owners or Domain Admins security group.

NOTE

If you're a member of the Group Policy Creator Owners group, you have rights to create but not link GPOs. Domain Administrators can create GPOs and link them to where ...

Get Group Policy: Fundamentals, Security, and Troubleshooting now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.