Server 2008 DC gpedit.msc vs Group Policy Management Console


  • Hello

    We have a Server 2008 R2 Domain Controller, what is the difference between gpedit.msc and Group Policy Management Console?

    Which over-rides which and which one pushes down to desktops?




    Tuesday, November 17, 2015 3:48 PM


  • Hello,

    GPMC is used to manage Active Directory group policies (create, modify, change etc.). Using GPMC you can create policies for all domain-joined servers and workstations.

    Gpedit.msc is used to modify local policies - policies that are placed only on the machine, where you are connected. It can be used in either workgroup or domain environments.

    So, if you have domain-based environment, you can take all advantages of group policies and GPMC. All AD-levvel policies takes precedence over local policies so if you modify a particular setting in both consoles, the setting created in GPMC will be applied.

    My LinkedIn profile

    Tuesday, November 17, 2015 4:06 PM