Creating a Group Policy

Print Friendly, PDF & Email

Creating a group policy is recommended for allowing limited access to applications.

  1. Open Server Manager.
  2. Navigate to Tools > Group Policy Management.

    GPO management

  3. On Group Policy Management (GPO) page, the organizational units created earlier are displayed under Domains.
  4. Right-click the Organizational Unit for which you want to create a new group policy. Click Create a new GPO in this domain, and Link it here.

    Create a new GPO

    A new dialog box opens.

  5. In the New GPO dialog box, enter the group policy name and click OK.

    New GPO dialog box

    This new group policy is created. It is visible in the left side pane.

  6. Now, right-click the policy. Click Edit.

    Edit GPO

  7. In left hand pane, navigate to User Configuration > Administrative Templates > System.
    Under System, double-click Run Only Specified Windows Applications.

    Run only specified windows applications

    A dialog box opens.

  8. Click Enabled option button.

    Enabled option button

  9. Click the list of allowed applications to see and add applications.

    The Show Content dialogue box opens.

  10. To add applications, click Show.
  11. In the Value column, type the exact .exe file names of applications you want to allow access to users.

    Show Contents

    Click OK to save it.

    Now the Group policy creation is complete.
    Note: mstsc.exe and rdpshell.exe are must to take RDP.

Was this page helpful?