What is Group Policy?
Group Policy is a Microsoft governance feature and configuration management framework built as part of the Windows OS; it provides a method for the centralized configuration and management of users’ and computers’ OS and applications.
It is used to force a baseline of standardized configuration settings on user and computer objects that are part of an AD domain. It is a powerful management capability and can manage nearly all configurable settings.
Group Policy can be used with Azure AD DS to manage user and computer object settings in much the same way as for AD DS, with some limitations. We will cover this in more detail in the GPOs in the Azure AD DS section.
There are two configuration settings nodes, as follows:
- User Configuration: These apply to a user. These settings can restrict a user from accessing certain functionality of the OS, such as removing items from the Start Menu and Taskbar. These settings are applied to a user...