Microsoft Server Policies Confusion

Posted on 2011-10-19
Last Modified: 2012-05-12
Can anyone clarify the layout of policies for me?

Here is my confusion.

When editing a GPO there are the SAME selections why are there many GPOs?  Why cant/shouldnt we just concentrate on editing one?  Im trying to wrap my head around this mess and i cant seem to grasp it.

Thanks for your help!
Question by:XChangingIT
    LVL 9

    Accepted Solution

    When it comes to organizing GP settings there are recommendations that may answer your question. See the following articles and the discussions of "monolithic" vs "functional" organisation particular:
    LVL 77

    Assisted Solution

    by:Rob Williams
    There are multiple group policies because of the containers to which you want to apply them and also simply for organizational purposes.
    GPO's have user settings and computer settings. As a result most often you create a GPO with users settings and apply it to the OU (Organizational Unit) that contains the users to which you wish to apply the policy. You would do the same for policies affecting computers (rather than users) and have them applied to an OU containing the computers to which you want to apply the polici. Some policies are applied directly to the domain as well.

    From a best practices point of view you also want to have your policies self explaining for those that try to decode what you have done. If you create a new policy and name it "User Drive Mappings" or " User customizations"somebody else would have a pretty good idea what the policy is for when trying to trouble shoot. Alternatively you could edit the "Default Domain Policy" which will work, but makes locating changes from defaults very difficult to find.

    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    Join & Write a Comment

    Learn about cloud computing and its benefits for small business owners.
    Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
    This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
    This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now