To edit Administrative Template policy settings
  1. Open the Group Policy Management Console. Right-click the Group Policy object you want to edit and then click Edit.

  2. In the console tree, click the folder under Administrative Templates that contains the policy settings you want to configure.

  3. In the Setting column, click the name for a policy setting to read a description of the policy setting.

  4. To change that policy setting, double-click the name of the policy setting.

  5. On the policy setting dialog box, click one of the following:

    • Not Configured: The registry is not modified.

    • Enabled: The registry reflects that the policy setting is selected.

    • Disabled: The registry reflects that the policy setting is not selected.

  6. Select any other options, and then click OK.

Additional considerations

  • To complete this procedure, you must have Edit setting permission to edit a GPO. By default, members of the Domain Administrators security group, the Enterprise Administrators security group, or the Group Policy Creator Owners security group have Edit setting permission to edit a GPO.

  • Settings for HKEY_LOCAL_MACHINE are under Computer Configuration, and settings for HKEY_CURRENT_USER are under User Configuration.

  • If computer policy conflicts with user policy, computer policy generally takes precedence. However, if application authors disregard this convention, Group Policy cannot enforce it.

  • Administrative Template policy settings are also known as registry-based policy settings.