- On the AD server, open Group Policy Management.
- Right-click the Default Domain Policy setting. The Group Policy Management Editor opens.
A new policy is applied to the entire AD domain. Alternatively, you can create a new Group Policy Object, and link it to one or more OUs in the AD server that contains the endpoint computers on which EMS will deploy FortiClient.