Link to home
Start Free TrialLog in
Avatar of tdisalvo
tdisalvoFlag for United States of America

asked on

One large group policy vs many small group polices

This is a question on best practices.  I want to know which works better for system speed, one or two large group policies or many, like over 10 smaller group polices that would be targeted to specific ou's and groups?

I am looking for overall login speed.  We are revising what we have and trying to decide which is better.  From an administration point of view it seems that the many smaller polices will make it clearer which policy we need to go into to adjust settings.  We are concerned that all the extra policies will increase login time.  We are looking to go from 2 large group polices to about 10 to 15 smaller ones.

Breaking out settings for particular systems like an SCCM policy, a network policy, a security policy.  Where all of these settings we in a default policy before.

I am looking for an explanation of why one way is better than the other.  Preferably with some industry documentation to back up the statement.

Thanks
SOLUTION
Avatar of Joseph Moody
Joseph Moody
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I like Jmoody10's point as well, you may actually impove login times
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
mkline71: "I personally like breaking them out a bit but more because they are self documenting that way (just easier for me...not because of perf)"
Completely Agree! So much easier to know exactly what a GPO name IE Settings does than a GPO named General Computer Settings.
Avatar of tdisalvo

ASKER

Thanks to all that replied.  Spec01 that article was exactly what I was looking for.