Greetings, I'm Professor Kay. And in this short video presentation, we're going to see how we go about editing a Group Policy Object to affect computers in our server 2016 domain. In a previous video, you saw how we used group policy to disable users having access to the command prompt for all users that reside inside of the payroll container. Let's take a look at how that actually works. So we're going to go up to tools, let's go to Active Directory Users and Computers. Now up here inside of my payroll container, you'll see that I have a couple of users.

So now when these users log on to the domain, so now when these two users log on to the domain, they will be restricted from having access to their control panel while inside of the payroll container. Currently, we don't have any computers inside of the payroll containers. Let's go ahead and create one. So I'm going to right click on my payroll organizational unit. I'm going to go to new I'm going to create a new computer, we're just going to call this payroll, you can go ahead and leave the user or the group as a default, that's fine. Just go ahead and say OK to that.

So now we have a computer that's inside of the payroll container that will be affected by the Group Policy Object that we're about to edit. Let's close out Active Directory Users and Computers. And let's go to Tools. And from here, let's go on down to Group Policy Management. From here, we can expand our domains container. And from here, we can click on the name of our domain.

And we can see all the containers or the organizational units that are currently being affected by a group policy inside of our domain. From here, expand your payroll organizational unit, and you'll see that Group Policy Object that we created earlier, just right click on an object, select Edit. Let's go ahead and make this full screen. And you'll see that we have two different options that we can edit up inside of this group policy. As before, we can modify the Computer Configuration or the user configuration. In this example, we're going to modify a setting that's going to affect computers when those computers are logged on to the domain.

As long as that computer is inside of the payroll container, it will be affected by this Group Policy Object. So just as before, we can go ahead and expand policies. And again, we have the majority of the settings are going to be available to us underneath Administrative Templates. Here, you can go to system and you can see all the different settings that you have available that can be configured for the computer when the user logs on for the first time, you have network, you have all these different options that you can play with in here. I suggest that you Be very careful when you're dealing with these different settings. They can get you in a lot of trouble underneath windows components.

For instance, you have the camera. Now if you open up The camera setting, you'll see that it says allow use of cameras, you may not want to allow users to connect a camera to their computer, especially inside of a sensitive area. So you can go ahead and double click this and here we can go ahead and enable the setting. And now users will not be able to use a camera inside of the payroll center. Go ahead and make this full screen so we can apply. say, Okay, so in this short video presentation, you saw how easy it was for us to go up inside of our group policy for the payroll container and modify a setting for the computers that are currently available inside of the payroll organizational unit.