Publication Date: April 2026 Version: 1.0 Audience: System Administrators, IT Pros, Windows Engineers Abstract The Group Policy Management Console (GPMC) remains the cornerstone of policy-based configuration management for Windows client operating systems. With the advent of Windows 11, Microsoft has introduced new administrative templates (ADMX/ADMX), security baselines, and feature integrations that enhance GPMC’s capabilities. This paper explores the deployment, functionality, known limitations, and operational best practices for using GPMC in a Windows 11 enterprise environment, including its behavior in both on-premises Active Directory and Microsoft Intune/Azure AD hybrid scenarios. 1. Introduction Group Policy allows organizations to enforce settings on users and computers. The GPMC, a Microsoft Management Console (MMC) snap-in, provides a unified interface for managing Group Policy Objects (GPOs), linking them to Active Directory (AD) sites, domains, and organizational units (OUs), and performing resultant set of policy (RSOP) modeling.
On Windows 11, GPMC is but is available as a Features on Demand (FoD) component or as part of the Remote Server Administration Tools (RSAT). 2. Installing GPMC on Windows 11 Unlike Windows 10, where RSAT was an optional feature downloadable separately, Windows 11 integrates RSAT directly into the operating system as optional features. 2.1 Methods of Installation | Method | Command / Steps | Use Case | |--------|----------------|-----------| | Settings App | Settings > Apps > Optional features > Add feature > Search for "RSAT: Group Policy Management Tools" | GUI preferred | | PowerShell (Admin) | Add-WindowsCapability -Name "Rsat.GroupPolicy.Management.Tools~~~~0.0.1.0" -Online | Scripted deployment | | Deployment Image Servicing and Management (DISM) | DISM /Online /Add-Capability /CapabilityName:Rsat.GroupPolicy.Management.Tools~~~~0.0.1.0 | Offline or recovery environment | gpmc windows 11