• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 214
  • Last Modified:

Microsoft Server Policies Confusion

Can anyone clarify the layout of policies for me?

Here is my confusion.

When editing a GPO there are the SAME selections why are there many GPOs?  Why cant/shouldnt we just concentrate on editing one?  Im trying to wrap my head around this mess and i cant seem to grasp it.

Thanks for your help!
2 Solutions
When it comes to organizing GP settings there are recommendations that may answer your question. See the following articles and the discussions of "monolithic" vs "functional" organisation particular:

Rob WilliamsCommented:
There are multiple group policies because of the containers to which you want to apply them and also simply for organizational purposes.
GPO's have user settings and computer settings. As a result most often you create a GPO with users settings and apply it to the OU (Organizational Unit) that contains the users to which you wish to apply the policy. You would do the same for policies affecting computers (rather than users) and have them applied to an OU containing the computers to which you want to apply the polici. Some policies are applied directly to the domain as well.

From a best practices point of view you also want to have your policies self explaining for those that try to decode what you have done. If you create a new policy and name it "User Drive Mappings" or " User customizations"somebody else would have a pretty good idea what the policy is for when trying to trouble shoot. Alternatively you could edit the "Default Domain Policy" which will work, but makes locating changes from defaults very difficult to find.

Featured Post

Restore individual SQL databases with ease

Veeam Explorer for Microsoft SQL Server delivers an easy-to-use, wizard-driven interface for restoring your databases from a backup. No expert SQL background required. Web interface provides a complete view of all available SQL databases to simplify the recovery of lost database

Tackle projects and never again get stuck behind a technical roadblock.
Join Now