Universal Policy Administrator Documentation
< All Topics
Print

Creating Universal Policies

Let’s start by creating a Universal Policy.  There are 3 options for creating a new UP:

  • From scratch as an Empty Universal Policy with no settings
  • Import a GPO from Active Directory
  • From a GPO Security Template

As shown in the dialog box below, select the type of policy that you would like to create.  After the policy is created, it will show up as a policy in the list and it will be Checked out. 

Creating an Empty Universal Policy or Importing from a GPO

To create a new Universal Policy from the web console:

  1. In the Universal Properties tab, click + New to open the New Universal Policy dialog box.
  2. Select Empty Universal Policy or Import a GPO.
  3. Enter a Name for the New Universal Policy.
  4. If importing a GPO from AD, from the pulldown menu, select a GPO to import.
  5. Enter the Domain.
  6. (Optional) Select a Delegation OU.
  7. (Optional) Select a WMI Filter for Domain OUs from the drop-down list.
  8. Click Create (or Import if importing a GPO).

Note: If you import a GPO that includes ADMX policy templates that are not currently in the UPA database, when you click on the Universal Policy, you will see a notification in yellow that there are missing ADMXs. To include the missing ADMXs, see the Working with ADMX Templates section.

Creating a New Policy from a GPO Security Template

If you are creating a policy from a GPO Security Template, UPA will search for .INF files in a file share.  If you are using Least Privilege Access (LPA) accounts, both the UPA Service and the user logging into UPA (e.g., UPA Admin or UPA Editor) must have Read Permission access to the file share as shown below.

To create a new Universal Policy from a GPO Security Template:

  1. In the Universal Properties tab, click + New to open the New Universal Policy dialog box.
  2. Select From GPO Security Template.
  3. Click to Browse GPO Security Templates…
  4. Select on the Shares and the .INF template and click Select.
  5. Name the template.
  6. (Optional) Select a Delegation OU.
  7. (Optional) Select a WMI Filter for Domain OUs from the drop-down list.
  8. Click Create.
In This Article