Group Policy Editor (gpedit.msc)


The Group Policy Editor (gpedit.msc) provides a more robust means of configuring the registry than by editing the registry directly.

  • vendors can write administrative templates to make third-party software configurable via policies
  • more efficient way of imposing policy settings than manually configuring each machine
  • Some policies are configured by inputting a discrete value, but most use an enabled/disabled/not defined toggle
  • read each policy carefully
  • understand the default behavior of leaving a setting not defined