locked
how to delete group policy object RRS feed

  • Question

  • Hi there,

    just wondering, can we delete a group policy object?

    I know we can delete the link but not the actual object itself.
    Monday, January 4, 2010 4:07 AM

Answers

  • Hi,
     The Group Policy Management Console should be used for all GPO tasks in Windows 2008 or later. 

    You should be able to expand your forest and your domain within the console to see GPOs and GPO links. GPO objects themselves are found under the domain node in the Group Policy Objects node. Links can be found in their respective location in the hierarchy (GPOs linked to sites can only be seen after right clicking the Sites node and selecting Show Sites). The GPOs and/or links can be removed if you have the required permissions.

    Thanks,
    Guy
    • Marked as answer by Miles Li Wednesday, January 13, 2010 8:29 AM
    Monday, January 4, 2010 10:48 PM
  • Hi,

    When you ry to delete a GPO permanently from AD it does gives you option to either delete the Link or delete the GPO permanently.

    Here is what you need to follow --

    How to remove a GPO link

    When you remove a GPO link from a site, domain, or OU; only that particular GPO link is removed. The associated GPO is not deleted. This means that the GPO is still stored in Active Directory.

    Use the steps below to remove a GPO link from a site, domain, or OU, and not delete the GPO from Active Directory.

    1. To remove an existing GPO link from a site, click Start, Administrative Tool, and click Active Directory Sites And Services. To remove an existing GPO link from a domain or OU, click Start, Administrative Tool, and click Active Directory Users And Computers.
    2. Right-click the particular site, domain, or OU that you want to remove a GPO link from, and select Properties on the shortcut menu.
    3. When the Properties dialog box for the site, domain, or OU opens, click the Group Policy tab.
    4. Click the GPO that should be unlinked from the site, domain, or OU, and then click Delete.
    5. When the Delete dialog box opens, click Remove The Link From The List.
    6. Click OK

    How to permanently delete a GPO

    When you delete a GPO, that particular GPO is permanently removed from Active Directory.

    1. To delete a GPO from a site, click Start, Administrative Tool, and click Active Directory Sites And Services. To delete a GPO from a domain or OU, click Start, Administrative Tool, and click Active Directory Users And Computers.
    2. Right-click the particular site, domain, or OU that you want to delete the GPO from, and select Properties on the shortcut menu.
    3. When the Properties dialog box for the site, domain, or OU opens, click the Group Policy tab.
    4. Click the GPO that should be deleted from the site, domain, or OU, and then click Delete.
    5. When the Delete dialog box opens, click Remove The Link And Delete The Group Policy Object Permanently.
    6. Click OK


    Hope the Info helps.

    Thanks,
    Nitin

    • Marked as answer by Miles Li Wednesday, January 13, 2010 8:29 AM
    Monday, January 4, 2010 9:55 AM

All replies

  • Hi,

    When you ry to delete a GPO permanently from AD it does gives you option to either delete the Link or delete the GPO permanently.

    Here is what you need to follow --

    How to remove a GPO link

    When you remove a GPO link from a site, domain, or OU; only that particular GPO link is removed. The associated GPO is not deleted. This means that the GPO is still stored in Active Directory.

    Use the steps below to remove a GPO link from a site, domain, or OU, and not delete the GPO from Active Directory.

    1. To remove an existing GPO link from a site, click Start, Administrative Tool, and click Active Directory Sites And Services. To remove an existing GPO link from a domain or OU, click Start, Administrative Tool, and click Active Directory Users And Computers.
    2. Right-click the particular site, domain, or OU that you want to remove a GPO link from, and select Properties on the shortcut menu.
    3. When the Properties dialog box for the site, domain, or OU opens, click the Group Policy tab.
    4. Click the GPO that should be unlinked from the site, domain, or OU, and then click Delete.
    5. When the Delete dialog box opens, click Remove The Link From The List.
    6. Click OK

    How to permanently delete a GPO

    When you delete a GPO, that particular GPO is permanently removed from Active Directory.

    1. To delete a GPO from a site, click Start, Administrative Tool, and click Active Directory Sites And Services. To delete a GPO from a domain or OU, click Start, Administrative Tool, and click Active Directory Users And Computers.
    2. Right-click the particular site, domain, or OU that you want to delete the GPO from, and select Properties on the shortcut menu.
    3. When the Properties dialog box for the site, domain, or OU opens, click the Group Policy tab.
    4. Click the GPO that should be deleted from the site, domain, or OU, and then click Delete.
    5. When the Delete dialog box opens, click Remove The Link And Delete The Group Policy Object Permanently.
    6. Click OK


    Hope the Info helps.

    Thanks,
    Nitin

    • Marked as answer by Miles Li Wednesday, January 13, 2010 8:29 AM
    Monday, January 4, 2010 9:55 AM
  • Thanks for the reply Nitin.

    I did that when we were still using Server 2003.
    Now we are using Server 2008 servers and I can't see any Group Policy tab on neither ADUC nor ADSS console.
    But we have Group Policy Management console installed on it.

    Does it matter?
    Monday, January 4, 2010 10:23 PM
  • Hi,
     The Group Policy Management Console should be used for all GPO tasks in Windows 2008 or later. 

    You should be able to expand your forest and your domain within the console to see GPOs and GPO links. GPO objects themselves are found under the domain node in the Group Policy Objects node. Links can be found in their respective location in the hierarchy (GPOs linked to sites can only be seen after right clicking the Sites node and selecting Show Sites). The GPOs and/or links can be removed if you have the required permissions.

    Thanks,
    Guy
    • Marked as answer by Miles Li Wednesday, January 13, 2010 8:29 AM
    Monday, January 4, 2010 10:48 PM
  • Hi,

    With GPMC the management would be slightly diferent althouh all the options are still available. Please refer to below mentioned Article -

    http://www.windowsecurity.com/articles/Delegating-Group-Policy-Privilege-using-GPMC.html

    Thanks,
    Nitin
    Tuesday, January 5, 2010 9:33 AM