14
Step 2: Edit a GPO
You can use GPOs to configure computer or user settings and deploy them to many computers
or users. In this step, you use an account that has the Editor role to check out a GPO from the
archive, edit the GPO offline, check the edited GPO into the archive, and request deployment of
the GPO to the production environment. For this scenario, you configure a setting in the GPO to
require that the password be at least eight characters long.
1. On a computer on which you have installed AGPM Client, log on with a user account that
has the role of Editor in AGPM.
2. In the
Group Policy Management Console tree, click
Change Control in the forest and
domain in which you want to manage GPOs.
3. On the
Contents tab in the details pane, click the
Controlled tab to display the controlled
GPOs.
4.
Right-click MyGPO, and then click
Check Out.
5. Type a comment to be displayed in the history of the GPO while it is checked out, and
then click
OK.
6. When the
AGPM Progress window indicates that overall progress is complete, click
Close. On the
Controlled tab, the state of the GPO is identified as
Checked Out.
1. On the
Controlled tab, right-click
MyGPO, and then click
Edit to open the
Group Policy
Management Editor window and change an offline copy of the GPO. For this scenario,
configure the minimum password length:
a. Under
Computer Configuration, double-click
Policies,
Windows Settings,
Security Settings,
Account Policies, and
Password Policy.
b.
In the details pane, double-click
Minimum password length.
c.
In the properties window, select the
Define this policy setting check box, set the
number of characters to
8, and then click
OK.
2.
Close the Group Policy Management Editor window.
1. On the
Controlled tab, right-click
MyGPO and then click
Check In.
2.
Type a comment, and then click
OK.
3. When the
AGPM Progress window indicates that overall progress is complete, click
Dostları ilə paylaş: