This article guides you through how to set up group policies through Synology Directory Server and RSAT.

Configure default domain policies

Default Domain Policy allows you to maintain account security on a domain level by setting up password and account lockout policies. You can click Domain Policy on the left panel to manage these two types of default domain policies.¹

Use RSAT to manage group policies

With Synology Directory Server, you can configure policies related to passwords and account lockout. To configure other types of group policies, however, you have to use Windows Remote Server Administration Tools (RSAT)² on a domain-joined Windows PC.

Follow the steps to install RSAT to your Windows PC:

For Windows 10, version 1809 or later

RSAT is included in Windows as a set of optional features. To enable these tools:

1. Go to Start > Settings > Apps > Optional features.
2. Click View Features (for Windows 11) or + Add a feature (for Windows 10).
3. Enter RSAT in the search box to select and install the RSAT tools you need, such as RSAT: DNS Server Tools, RSAT: Group Policy Management Tools, RSAT: Server Manager, etc.
   

For earlier Windows versions

1. Download Windows RSAT from Microsoft Download Center to a Windows PC. Different Windows versions have separate RSAT installation files. You can refer to the following list to find an installation file corresponding to your version of Windows:
• Windows 10
• Windows 8.1
• Windows 8
2. Run the downloaded file and follow the onscreen instructions in the wizard to install RSAT.
3. When the installation is complete, go to Windows Control Panel > Programs > Turn Windows features on or off, and tick the Remote Server Administration Tools checkbox.
   
4. Make sure you have joined the current computer to your domain and signed in as a domain administrator. You will find RSAT at Windows Control Panel > Administrative Tools.