What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Group Policy Management Console (GPMC) is the standard administration tool for managing Group Policy Objects in an Active Directory environment. On Windows 10, it is installed as part of the Remote Server Administration Tools (RSAT), allowing administrators to create, edit, link, and troubleshoot GPOs from a workstation instead of signing in to a domain controller.
Installing GPMC on Windows 10 typically involves adding the appropriate RSAT optional feature, then confirming that the console is available through the Start menu, Run command, or PowerShell. Before installation, administrators should verify Windows 10 edition and version compatibility, network access, and permissions required to manage Group Policy in the domain.
As an Amazon Associate I earn from qualifying purchases.
This guide covers the main installation methods using Windows Optional Features and PowerShell, then walks through how to verify and launch GPMC. It also addresses common issues such as missing RSAT features, failed installations, unavailable consoles, and domain connectivity problems.
What Is Group Policy Management Console on Windows 10?
Group Policy Management Console, commonly opened as gpmc.msc, is the Microsoft management tool used to create, edit, link, back up, restore, and troubleshoot Group Policy Objects in an Active Directory environment. On Windows 10, it is not installed as a standalone download in current builds; it is provided through Remote Server Administration Tools as an optional Windows capability. After installation, administrators can manage domain-based Group Policy from a Windows 10 workstation instead of signing in directly to a domain controller.
#1 Best Overall
- Fresh USB Install With Key code Included
- 24/7 Tech Support from expert Technician
- Top product with Great Reviews
GPMC is most useful on domain-joined Windows 10 Pro, Enterprise, or Education devices used by IT staff. From the console, an administrator can browse Active Directory forests and domains, view organizational units, link existing GPOs, create new GPOs, and open the Group Policy Management Editor for policy configuration. It also provides access to Group Policy Results and Group Policy Modeling, which help check what policies apply to a user or computer and simulate policy processing before changes are deployed.
What GPMC allows administrators to manage
- Group Policy Objects: Create, edit, delete, copy, import, back up, and restore GPOs.
- GPO links: Link policies to sites, domains, and organizational units, and adjust link order.
- Security filtering: Control which users, computers, or groups can apply a policy.
- WMI filtering: Apply policies only when a target computer matches defined conditions.
- Policy reporting: Generate HTML or XML reports showing configured settings in a GPO.
- Policy analysis: Use Group Policy Results and Modeling to review applied or predicted settings.
It is helpful to distinguish GPMC from the Local Group Policy Editor. The Local Group Policy Editor, launched with gpedit.msc, changes policy settings only on the local Windows 10 computer. GPMC, launched with gpmc.msc, is designed for centralized domain administration. If an administrator needs to configure password policies, Windows Update settings, mapped drives, security baselines, browser policies, or desktop restrictions across many computers, GPMC is the tool used to manage those settings at scale.
Installing GPMC on Windows 10 does not turn the workstation into a domain controller and does not create Active Directory by itself. The console connects to existing domain infrastructure, so the signed-in administrator still needs appropriate permissions in Active Directory and access to domain controllers and SYSVOL. In many environments, help desk or system administration workstations have GPMC installed so staff can manage delegated OUs, review policy application, and launch the Group Policy Management Editor without using a server desktop session.
Prerequisites for Installing GPMC
Before installing the Group Policy Management Console on Windows 10, confirm that the workstation supports the Remote Server Administration Tools feature set. On current Windows 10 releases, GPMC is installed as an optional Windows capability rather than as a separate RSAT download. This applies to Windows 10 version 1809 and later, where RSAT components are added through Settings, Windows Features, or PowerShell.
The computer should be running a supported business edition of Windows 10, such as Windows 10 Professional, Enterprise, or Education. Windows 10 Home does not include domain-join support and is not suitable for normal Group Policy administration. To check the edition and version, open Settings > System > About, or run winver from the Run dialog. If the device is on an older Windows 10 build prior to 1809, use the matching RSAT installer package for that build instead of Optional Features.
You also need local administrator rights to add the GPMC capability. If the device is managed by an organization, installation may be restricted by update policies, endpoint management tools, or software restriction controls. In managed environments, administrators may need to approve the RSAT capability through WSUS, Microsoft Configuration Manager, Microsoft Intune, or another patch management platform before the feature appears or installs successfully.
Installation requirements to confirm
- Windows edition: Windows 10 Pro, Enterprise, or Education is recommended for domain administration tasks.
- Windows version: Windows 10 version 1809 or later supports RSAT installation through Optional Features and PowerShell capabilities.
- Permissions: The signed-in account must have local administrator privileges on the workstation.
- Network access: The device may need access to Windows Update or an approved internal update source to download RSAT components.
- Domain connectivity: To manage domain Group Policy Objects, the workstation should be joined to the Active Directory domain or have network access to domain controllers.
- Administrative credentials: The user must have appropriate Active Directory and Group Policy permissions to edit or manage GPOs.
GPMC can be installed on a workstation that is not currently connected to a domain, but its usefulness is limited until the administrator can reach Active Directory. For domain-based management, verify DNS is configured to use domain DNS servers, the computer can contact a domain controller, and firewall or VPN rules allow the required management traffic. If you plan to manage Group Policy across forests or remote sites, also confirm that trusts, name resolution, and administrative permissions are in place.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesIn environments where Windows Update is blocked, Optional Features may fail to install unless the system is allowed to download Features on Demand. Administrators should check whether policy settings such as Specify settings for optional component installation and component repair redirect feature installation to WSUS. If RSAT capabilities are not available from the configured update source, the installation may require access to Microsoft Update or a Features on Demand source approved by the organization.
Install GPMC Using Windows Optional Features
On Windows 10 version 1809 and later, the Group Policy Management Console is installed as part of the Remote Server Administration Tools feature set through Optional Features. This is the preferred graphical method because it does not require downloading a separate RSAT installer. You can install only the Group Policy tools you need, leaving out other administrative components such as DNS, DHCP, or Active Directory tools.
Before you begin, sign in with a local administrator account or an account that has administrative rights on the Windows 10 device. The computer should also have internet access unless your organization provides Features on Demand from Windows Server Update Services, Configuration Manager, or a local source. If the device is managed by corporate policy, some Optional Features may be blocked or redirected to an internal update location.
- Open Settings from the Start menu.
- Select Apps.
- Choose Optional features.
- Click Add a feature.
- In the search box, type Group Policy or RSAT.
- Select RSAT: Group Policy Management Tools.
- Click Install.
Windows will download and install the required RSAT component. The feature name usually appears as RSAT: Group Policy Management Tools, and it includes the Group Policy Management Console used to manage domain-based Group Policy Objects. Installation time varies depending on update source, network speed, and whether Windows needs to retrieve the feature payload from Microsoft Update or an internal repository.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →After selecting the feature, remain on the Optional features page and check the Recent actions or Installed features section. If the installation completes successfully, the feature should be listed as installed. You usually do not need to restart Windows after adding GPMC, but if the console does not appear immediately, close Settings, wait a moment, and check again.
Confirm the Installed Optional Feature
To confirm the component is present from the Settings interface, return to Settings > Apps > Optional features and search the installed features list for RSAT: Group Policy Management Tools. If it appears there, Windows has added the GPMC feature. You can then launch it from the Start menu by searching for Group Policy Management, or by pressing Windows + R, entering gpmc.msc, and selecting OK.
If you see Group Policy Object Editor or Edit group policy instead, that is not the same tool. The Local Group Policy Editor, opened with gpedit.msc, manages local policy settings on the Windows 10 computer. The Group Policy Management Console, opened with gpmc.msc, is the administrative console used to view and manage domain GPOs, links, inheritance, WMI filters, and Group Policy results.
When the Feature Does Not Appear
- Check the Windows 10 version: Optional Features-based RSAT installation is available on Windows 10 version 1809 and later.
- Confirm the edition: Use Windows 10 Professional, Enterprise, or Education. Home edition does not include the required management capability.
- Review update policies: Managed devices may be configured to block downloads from Microsoft Update or to use WSUS without Features on Demand content.
- Try a broader search: Search for RSAT instead of Group Policy if the exact feature name does not appear immediately.
Once installed, GPMC can be used from the Windows 10 workstation to administer Group Policy in an Active Directory domain, assuming the signed-in account has the required domain permissions and the computer can reach a domain controller.
Install GPMC Using PowerShell
PowerShell is a fast way to install the Group Policy Management Console on Windows 10, especially when you need to configure mulle administrator workstations or prefer a repeatable command-line method. On Windows 10 version 1809 and later, GPMC is installed as part of the RSAT Feature on Demand package named Rsat.GroupPolicy.Management.Tools. You must run PowerShell with administrative privileges and the computer must be able to reach Windows Update or a configured Feature on Demand source.
To begin, right-click Start, select Windows PowerShell (Admin) or Terminal (Admin), and approve the UAC prompt. Then check whether the Group Policy RSAT capability is already present:
Get-WindowsCapability -Online -Name Rsat.GroupPolicy.Management.Tools*
Review the State value in the output. If it shows Installed, GPMC is already available on the computer. If it shows NotPresent, install it with the following command:
Add-WindowsCapability -Online -Name Rsat.GroupPolicy.Management.Tools~~~~0.0.1.0
After the command completes, PowerShell should report that the operation succeeded. In most cases, a restart is not required, but if the console does not appear immediately or related management tools behave unexpectedly, restart the computer and check again. You can confirm the installation with the same capability query:
Get-WindowsCapability -Online -Name Rsat.GroupPolicy.Management.Tools*
Install GPMC from a local source
Some managed environments block direct access to Windows Update or use WSUS policies that prevent Features on Demand from downloading. If the installation fails with a source-related error, use a Windows 10 Features on Demand ISO or a network share that contains the RSAT capability files. Mount the ISO or confirm the source path, then run a command similar to this:
Rank #2
- [Win OS Install or reinstall] — Boot from the USB to install or reinstall Win 11, 10, or 7 Home & Pro editions. Includes OS installations and reinstallations media plus WinPE Utility Suite.
- [WinPE Repair & Recovery Tools] — Boot into the included WinPE utility suite to backup system and important files, troubleshoot startup problems, repair boot issues, recover data, recover Win User accounts password, and diagnose common PC problems.
- [All-in-One PC Rescue USB] — Combines Win 11, 10, and 7 installation media with PC repair, recovery, and diagnostic tools on one bootable 64GB USB drive, helping you troubleshoot and restore a computer without needing multiple discs or downloads.
- [Support] — Full instructions are included in packaging plus a printable copy of the instructions with troubleshooting information on the device. Also, a video “How to boot from a bootable USB drive.mp4” to help guide you through starting a PC from a USB drive. If you need help using the USB please contact us for assistance, we are here to help.
- [Video] - If you are new to booting from a USB drive or need a refresher see our video "How to boot from USB drive" both in description and on USB device.
Add-WindowsCapability -Online -Name Rsat.GroupPolicy.Management.Tools~~~~0.0.1.0 -Source "D:\Sources\SxS" -LimitAccess
Replace D:\Sources\SxS with the correct path for your environment. The -LimitAccess parameter tells Windows not to contact Windows Update and to use only the specified source. This is useful on secured administrator workstations that do not have internet access.
Common PowerShell installation issues
- Access is denied: Open PowerShell as an administrator. A standard user session cannot add Windows capabilities.
- Capability name is not recognized: Confirm the device is running a supported Windows 10 edition and version. RSAT Features on Demand are built into Windows 10 1809 and later.
- Download failed or source files could not be found: Check internet access, WSUS policy, proxy settings, or provide a valid Features on Demand source with -Source.
- Installation succeeds but GPMC is missing: Sign out and back in, restart the computer, then verify the capability state again.
Once installed, launch the console by pressing Win + R, typing gpmc.msc, and pressing Enter. You can also search for Group Policy Management from the Start menu. If the console opens but domain objects are unavailable, confirm the workstation is domain-joined or connected through VPN, verify DNS can resolve domain controllers, and use an account with permission to read and manage Group Policy Objects.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Verify and Launch Group Policy Management Console
After installing the RSAT Group Policy Management Tools on Windows 10, confirm that the Group Policy Management Console is actually present before you begin administering domain Group Policy Objects. A completed Optional Features or PowerShell installation should add the Group Policy Management snap-in, register the gpmc.msc console file, and make the tool available from Windows administrative shortcuts. Verification is especially useful on managed workstations, offline-imaged devices, or systems where RSAT installation may be controlled by update policies.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Check GPMC from the Start menu
The quickest check is to search for the console by name. Open the Start menu and type Group Policy Management. If the installation succeeded, Windows should show Group Policy Management as a desktop app or Microsoft Management Console item. Select it to open the console. You can also look under Windows Administrative Tools in the Start menu, where RSAT tools are commonly listed on Windows 10.
Launch GPMC with the Run command
Administrators often launch the console directly by using its MMC file name. Press Windows + R, enter gpmc.msc, and select OK. If GPMC is installed, Microsoft Management Console opens and loads the Group Policy Management snap-in. If Windows displays a message that it cannot find gpmc.msc, the RSAT Group Policy Management Tools are not installed correctly, are disabled, or the system has not refreshed its feature registration after installation.
Confirm the RSAT feature state
You can also verify the installation from Windows Optional Features. Go to Settings > Apps > Optional features, then review the installed features list. Look for RSAT: Group Policy Management Tools. Its presence indicates that the Windows capability is installed. If it is missing, return to Add a feature, search for RSAT or Group Policy, and install the Group Policy Management Tools again.
| Verification method | What to check | Expected result |
|---|---|---|
| Start menu search | Search for Group Policy Management | The console appears and opens normally |
| Run dialog | Run gpmc.msc | Microsoft Management Console opens GPMC |
| Optional Features | Check installed features | RSAT: Group Policy Management Tools is listed |
| PowerShell | Check RSAT capability status | The Group Policy capability shows as installed |
For a PowerShell-based check, open PowerShell as an administrator and query the Windows capability for Group Policy Management Tools. The capability name should return an Installed state. This is useful when validating several administrator workstations or documenting a build process. If the feature reports as installed but the console does not open, restart the computer and test again, because some systems do not expose newly installed administrative tools until after a sign-out or reboot.
Recommended Free Tools
Once the console launches, expand Forest, then Domains, and select the Active Directory domain you administer. To view and edit domain GPOs, sign in with an account that has the necessary permissions, such as a domain administrator account or a delegated Group Policy administrator account. The Windows 10 computer also needs network connectivity to a domain controller and proper DNS configuration pointing to Active Directory DNS servers. If the console opens but the domain does not appear, verify domain join status, VPN or LAN connectivity, DNS resolution, and your administrative permissions before reinstalling RSAT.
Troubleshoot GPMC Installation Issues
If the Group Policy Management Console does not appear after installing RSAT on Windows 10, start by confirming that the correct RSAT capability is installed. GPMC is provided by the Rsat.GroupPolicy.Management.Tools capability, not by every RSAT component. In Settings, go to Apps > Optional features and look for RSAT: Group Policy Management Tools. From PowerShell, run Get-WindowsCapability -Online -Name Rsat.GroupPolicy.Management.Tools* and check whether the state is Installed.
A common problem is installing RSAT on an unsupported Windows 10 edition or build. RSAT Optional Features require Windows 10 Professional, Enterprise, or Education on supported releases. Windows 10 Home does not include the management stack needed for GPMC. If the optional feature is missing from Settings, check the Windows edition with winver or Settings > System > About, then confirm that the computer is fully updated through Windows Update.
Fix installation failures from Optional Features
When installation fails from the Optional Features page, Windows may be unable to download Features on Demand. This often happens on domain-joined computers that use WSUS or a restricted update policy. Try installing after connecting to the internet and running Windows Update. If your organization blocks direct downloads from Microsoft, an administrator may need to allow Features on Demand or provide a local source for RSAT files.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11- Restart the computer after a failed or partial RSAT installation, then check Optional Features again.
- Run Windows Update and install pending cumulative updates before retrying GPMC installation.
- Remove and reinstall the capability if the feature shows as installed but gpmc.msc is missing.
- Check proxy, VPN, and firewall rules if Windows cannot contact Microsoft update endpoints.
Check PowerShell and DISM results
If you installed GPMC with PowerShell, review the returned state and any error code. Run Get-WindowsCapability -Online -Name Rsat.GroupPolicy.Management.Tools* again. If the state is NotPresent, install it with Add-WindowsCapability -Online -Name Rsat.GroupPolicy.Management.Tools~~~~0.0.1.0. If the state is InstallPending, restart Windows and check again. If errors continue, run DISM /Online /Cleanup-Image /RestoreHealth, then retry the RSAT installation.
After installation, make sure you are launching the correct console. Press Windows + R, type gpmc.msc, and press Enter. You can also search for Group Policy Management from the Start menu. If the console opens but you cannot view or edit domain Group Policy Objects, the issue is usually permissions or connectivity rather than installation. Confirm that the computer can reach a domain controller, DNS is pointing to the domain DNS servers, and your account has appropriate rights to manage Group Policy.
Common errors and checks
| Symptom | What to check |
|---|---|
| RSAT Group Policy Tools not listed | Confirm Windows 10 edition, install updates, and verify Optional Features availability. |
| Installation fails or stays pending | Restart Windows, run Windows Update, and check WSUS or Features on Demand policies. |
| gpmc.msc is not found | Verify Rsat.GroupPolicy.Management.Tools is installed, then reinstall the capability if needed. |
| Console opens but domain is unavailable | Check VPN, DNS, domain controller reachability, and domain permissions. |
Frequently Asked Questions
Do I need RSAT to install Group Policy Management Console on Windows 10?
Yes. On Windows 10, Group Policy Management Console is installed as part of RSAT, specifically the Group Policy Management Tools optional feature. On Windows 10 version 1809 and later, RSAT is installed through Optional Features or PowerShell instead of downloading a separate installer.
Why don’t I see Group Policy Management Tools in Optional Features?
This usually happens if the Windows 10 edition or version does not support the RSAT optional feature, or if the PC cannot reach Windows Update or a configured Features on Demand source. Confirm you are using Windows 10 Pro, Enterprise, or Education and that the machine has access to Windows Update or your organization’s configured update source. If your organization uses WSUS, you may need an administrator to allow Features on Demand downloads.
What PowerShell command installs GPMC on Windows 10?
Run PowerShell as an administrator and use Add-WindowsCapability -Online -Name Rsat.GroupPolicy.Management.Tools~~~~0.0.1.0. After it completes, you can confirm the state with Get-WindowsCapability -Online -Name Rsat.GroupPolicy.Management.Tools~~~~0.0.1.0. The result should show the feature as installed.
How do I open Group Policy Management Console after installing it?
Press Win + R, type gpmc.msc, and press Enter. You can also search for “Group Policy Management” from the Start menu. If the console opens, the installation is working and you can connect to your domain to manage Group Policy Objects.
Can I use GPMC on a Windows 10 computer that is not joined to a domain?
You can install and launch GPMC on a supported Windows 10 edition even if the computer is not domain-joined. However, to manage domain Group Policy Objects, you need network access to the domain, appropriate permissions, and domain credentials. For routine administration, using a domain-joined management workstation is usually the most reliable setup.
Bottom Line
Installing the Group Policy Management Console on Windows 10 is usually as simple as adding the RSAT Group Policy Management Tools through Optional Features, then confirming that gpmc.msc launches successfully. Before troubleshooting, make sure the Windows 10 edition and version support RSAT and that the system is fully updated.
Free tools Windows power users keep installed
One-click scans. No signup required.
Once installed, open GPMC from the Start menu, Run dialog, or administrative tools, and verify you can connect to the domain and view Group Policy Objects. If the console is missing or fails to install, recheck Optional Features, use PowerShell or DISM as an alternative, and confirm network, domain, and permissions requirements are in place.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
