GPO (Group Policy Object) is a Windows configuration object in Active Directory that allows administrators to centrally manage system settings, security policies, and software deployment for users and computers. GPOs are assigned at the domain, site, or organizational unit (OU) level.
Typical security settings via GPOs include password policies, screen locks, software restrictions, firewall rules, audit policies, and USB device blocking. GPOs enable consistent enforcement of security policies across hundreds or thousands of devices simultaneously. For the ISMS, GPOs are a central technical tool for enforcing requirements from policies on endpoint security and access control. The GPO configuration itself must be documented and reviewed regularly.