Microsoft Server Policies Confusion

Can anyone clarify the layout of policies for me?

Here is my confusion.

When editing a GPO there are the SAME selections why are there many GPOs?  Why cant/shouldnt we just concentrate on editing one?  Im trying to wrap my head around this mess and i cant seem to grasp it.

Thanks for your help!
Who is Participating?
x3manConnect With a Mentor Commented:
When it comes to organizing GP settings there are recommendations that may answer your question. See the following articles and the discussions of "monolithic" vs "functional" organisation particular:
Rob WilliamsConnect With a Mentor Commented:
There are multiple group policies because of the containers to which you want to apply them and also simply for organizational purposes.
GPO's have user settings and computer settings. As a result most often you create a GPO with users settings and apply it to the OU (Organizational Unit) that contains the users to which you wish to apply the policy. You would do the same for policies affecting computers (rather than users) and have them applied to an OU containing the computers to which you want to apply the polici. Some policies are applied directly to the domain as well.

From a best practices point of view you also want to have your policies self explaining for those that try to decode what you have done. If you create a new policy and name it "User Drive Mappings" or " User customizations"somebody else would have a pretty good idea what the policy is for when trying to trouble shoot. Alternatively you could edit the "Default Domain Policy" which will work, but makes locating changes from defaults very difficult to find.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.