Hi,
You can install the Group Policy Management
feature on either your WSUS server or on your Domain Controller (DC) to be able to manage and create group policies.
I would install it on another server than the DC to avoid having to log on to the DC, also because of security reasons, best would be to have a management server/client where you install all the Active Directory (AD) tools.
You can also install the Group Policy Management on a client with the
Windows Remote Server Administrator Tools (RSAT).
Best regards,
Leon
Blog:
https://thesystemcenterblog.com
LinkedIn: 