# Making a AD group and adding a security policy

1. On domain controller open Active Directory Users and Computers a. right click on domain b. go to NEW > GROUP&#x20;

<figure><img src="https://2273033137-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGlSezkssK5aHdG6Al3xJ%2Fuploads%2FcgAhUQcwZLaEDkYckAMN%2Fimage.png?alt=media&#x26;token=50c84dc5-f64d-4f4b-8abc-d0804aa537eb" alt=""><figcaption></figcaption></figure>

2. Name your group i am making one that member computers will never auto update a. under group scope - Domain local = only users or computers on this domain - Global = two or more domains - Universal = two or more seprate bisnesses b. group type - security policies = for security - Distribution = for everything else Making a OU with a security policy

<figure><img src="https://2273033137-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGlSezkssK5aHdG6Al3xJ%2Fuploads%2Fl24OUYlJwp8zRYsIgsCb%2Fimage.png?alt=media&#x26;token=133ac844-c446-4356-9936-f41ce40fb4a7" alt=""><figcaption></figcaption></figure>

## Making a OU with a security policy

1. On domain controller open Active Directory Users and Computers a. right click on domain b. go to NEW > OU

<figure><img src="https://2273033137-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGlSezkssK5aHdG6Al3xJ%2Fuploads%2FWPTZFLjtAiMgqXWNmjmK%2Fimage.png?alt=media&#x26;token=c7a7649b-3c1a-4267-bf1f-6f6032bde9a2" alt=""><figcaption></figcaption></figure>

2. Name the group

<figure><img src="https://2273033137-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGlSezkssK5aHdG6Al3xJ%2Fuploads%2FbeKHaJ7xFxGpf5T2FGG0%2Fimage.png?alt=media&#x26;token=d5bde498-944c-48bd-8de5-ff4e53ab86ce" alt=""><figcaption></figcaption></figure>

3. Open Group policy Management a. Forest > Domains > cyberpunk.local b. find your OU that you made c. right click select the first option

<figure><img src="https://2273033137-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGlSezkssK5aHdG6Al3xJ%2Fuploads%2FNqMZZrZYexdPo7lpk8dB%2Fimage.png?alt=media&#x26;token=28936999-f4b2-4870-b7c5-0d2bd50cdd9a" alt=""><figcaption></figcaption></figure>

4. Give the new gpo a name

<figure><img src="https://2273033137-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGlSezkssK5aHdG6Al3xJ%2Fuploads%2FqhBOgslHEVY6W8nlhUBC%2Fimage.png?alt=media&#x26;token=67efef92-4be6-475e-af45-a07c8e4cc20e" alt=""><figcaption></figcaption></figure>

5. Once made right click on newly made gpo and select

<figure><img src="https://2273033137-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGlSezkssK5aHdG6Al3xJ%2Fuploads%2FchAyN7EPAZ8xvfHXMUv8%2Fimage.png?alt=media&#x26;token=f13dfe39-9c62-464a-894a-7aa1ae415aee" alt=""><figcaption></figcaption></figure>

6.  To find the never auto update gpo setting:

    A. under computer config&#x20;

    B. policies&#x20;

    C Administrative templates d. windows components

    D. windows components

<figure><img src="https://2273033137-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGlSezkssK5aHdG6Al3xJ%2Fuploads%2FaYfcGQXuur5FzrbhraM6%2Fimage.png?alt=media&#x26;token=19e899ea-a61a-4159-bc94-f22405dae26a" alt=""><figcaption></figcaption></figure>

7.  Select Windows update:

    A. find and click on Config Auto updates&#x20;

    B. hit disable

    C. hit OK button

<figure><img src="https://2273033137-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGlSezkssK5aHdG6Al3xJ%2Fuploads%2FcvOcNR0YAcaH1xM7YzRO%2Fimage.png?alt=media&#x26;token=e58ca2e4-01e0-4151-be6f-9c4f9ca1c61f" alt=""><figcaption></figcaption></figure>

8.  On client computer or where you want the policy to apply&#x20;

    A. open a admin powershell&#x20;

    B. run

`gpupdate /force c. to check if the policy has applied to the machine run`

`gpresult /r /scope:computer`&#x20;



You should see your policy under Applied Group Policy Objects

<figure><img src="https://2273033137-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGlSezkssK5aHdG6Al3xJ%2Fuploads%2Fx8ZnimyE1Ipbke6RLMY9%2Fimage.png?alt=media&#x26;token=bd0840b9-086a-4de8-96d6-c6496e738a09" alt=""><figcaption></figcaption></figure>

