At our organization we have had bad luck so to speak with GPOs being globaly pushed but recently it has been failry quite due to change requests being enforced.
Now as the GPO pushed to workstation is stable some techs want to use iot to push GPOs to servers.
I am very unconfortable with this idea as I feel servers can have unique requirements and the ulitmate configuration should be responsible by the tech that services it.
What is best practise when appling GPOs globally to Servers in a Domain, is it recommended or is it not? If best practise for a management strategy is yes I will be more inclined to accept this.
Comments are appreciated
Microsoft Legacy OSMicrosoft Server OSActive Directory