For the most part, Group Policy assignments for virtual machines are not performed differently than how they would have been performed if the systems were installed directly on physical hardware. Depending on the structure of your Active Directory, they might wind up in Organizational Units alongside physical deployments. As an example, you may have Windows 7 computers that are part of a virtual desktop infrastructure (VDI). For these, you can restrict who can log in remotely, but otherwise you might want them to have the same policies as regular Windows 7 computers. To achieve this, there is an attribute of the virtual machine that can be discovered through Windows Management Instrumentation (WMI) and filtered in Group Policy.
To restrict Group Policy to virtual machines, execute the following steps:
Open Group Policy Management Console. Right-click on WMI Filters in the tree and click on New. Give it an identifiable name; these steps can be used...