1 - Go to Microsoft Group Policy Management Console ( note the QAS group policy extension must be installed on the machine)
2 - Right click the desired OU where the policy should be created and linked and create GPO name or edit an existing GPO
3 - Navigate to computer configuration | Policies | Unix Settings | Quest Authentication Services | Client Configuration
4 - Double click Sudo and setup rules.
