Creating/Administering GPO

For GPO Creation and Administration, you may use the following servers:
For breeneng.com domain - 24h

For bei-servicesinc.com domain - FS SG

1. Type in gpmc.msc in windows search and click on the app

2. After opening the console, you can create a new gpo linked to an ou as needed, or, link an existing gpo to the ou that needs it.

So that other admins can edit the gpo, do the following:

1. Click on gpo, go to delegation tab then click advanced near the bottom2. A screen like the one below will show. Click on Advanced

3. Click on Add

4. Click on Select Principal. Then type in aws delegated adminstrators, click on check names, then click ok.

4. Click on full control checkbox, then scroll down. Go to step 5

5. Uncheck Apply group policy. Then check Read all properties. (as shown in picture) step 4 and 5 are the most important. Please make sure they are followed properly.

6. Click on OK -> OK -> OK