Level: Intermediate
Presenter: Eli the Computer Guy
Date Created: April 17, 2013
Length of Class: 26:25
Research Assistance:
Windows Server 2012
Purpose of Class
Class Notes
Organizational Units are used to Group Users and Computers together so that you can assign Security to them easily
GPO’s or Group Policy Objects are the actual Security Policies that will be assigned.
Security and Permissions are different things.
GPO’s allow you to do things such as restrict the usage of Task Manager from some users regardless of which computer they log into, or to map a specific drive whenever a user logs in.
Process to Create and Assign GPO’s
Create an Organizational Unit
Move User or Computer Into OU
Create GPO
Assign OU to GPO
Group Policy Management
Right Click “Group Policy Objects” and Select “New”
Give Name to GPO Click “OK”
In Right hand Window Right Click new GPO and Select “Edit”
Edit GPO to your needs
In Left Pane Right Click your Domain Name and Select “New Organizational Unit”
Give Name and Click “OK”
In Left Pane Right Click new Organizational Unit and Select “Link an Existing GPO”
Select GPO You want to be linked
Open Active Directory Users and Computers from Server Manager dashboard
Go to Users Folder
Right Click the User you want to be controlled by the Organizational Unit and Select “Move”
Select Organizational Unit from Folder Tree and Click “OK”
Go to CLIENT Computer (Windows 8,7,Vista)
Log in as User and GPO should be in Effect (If user is currently logged in, Log them Out and then back in)
Lab Setup Used in Demonstration
The ETCG Host Computer Specs are:
ASUS Model: CM6870US01
16 GB of RAM
1 TB 7200 RPM Hard Drive
i7 3.4 GHz Intel Processor
Windows Server 2012 Machine
Virtual Machine
AD, DNS and DHCP have been setup
Domain has been created
Networking Configuration in VirtualBox = Internal
Windows 8 Machine
Virtual Machine
Already a member of the Domain (
Networking Configuration in VirtualBox = Internal



  1. I had a doubt,i didn't get my user name in the User option I did the one as as u did,but u got the user 2 name in that user column bt I couldn't how did u save the user 2

  2. Thanks Eli, for sure you have played a big role as far as my job is concerned. keep up that spirit may God bless you abundantly.

  3. The magic about Eli is that he manages so well to build the visual in ones mind as he explains things. Eli you should think about writing a book! Big thanks from the UK

  4. How about just moving the whole group with 50 Users into the OU then assign the GPO to that OU instead of doing it 1by 1client. Asuming that all the 50users have the same Security policy to the system they're interacting with.
    NB: Employees are the real threats to the Network System with GPO Now its time to lock down some components infact am gonna lock dowbln the whole damn Control Panel NO WAY for them to install a damn APP and 'll also lock down some website including Youtube.

  5. Sir, Very good teaching technique , easy to understand , and create continuous interest to listen your videos that help me to learn , Thank you ,

  6. These videos are absolutely fantastic! Thank you so much! I am going for an interview for a sys admin position, moving from a Network Engineer. I was wondering if you had or know of any good tests on Group Policy and Active Directory. Thanks!


Please enter your comment!
Please enter your name here