Making a AD group and adding a security policy

1. On domain controller open Active Directory Users and Computers a. right click on domain b. go to NEW > GROUP

1. Name your group i am making one that member computers will never auto update a. under group scope - Domain local = only users or computers on this domain - Global = two or more domains - Universal = two or more seprate bisnesses b. group type - security policies = for security - Distribution = for everything else Making a OU with a security policy

Making a OU with a security policy

1. On domain controller open Active Directory Users and Computers a. right click on domain b. go to NEW > OU

1. Name the group

1. Open Group policy Management a. Forest > Domains > cyberpunk.local b. find your OU that you made c. right click select the first option

1. Give the new gpo a name

1. Once made right click on newly made gpo and select

1. To find the never auto update gpo setting:

   A. under computer config

   B. policies

   C Administrative templates d. windows components

   D. windows components

1. Select Windows update:

   A. find and click on Config Auto updates

   B. hit disable

   C. hit OK button

1. On client computer or where you want the policy to apply

   A. open a admin powershell

   B. run

gpupdate /force c. to check if the policy has applied to the machine run

gpresult /r /scope:computer

You should see your policy under Applied Group Policy Objects