Active Directory and Group Policy

I'm working on cleaning up group policy and need to present my recommendations.  

Question:  Does the group policy tree have to be identical to our active directory tree?  In other words, if I would like to move the order in which the OU's are can I do that?  
Do I have to follow the exact order of the current active directory.
Mary MacchioniAsked:
Who is Participating?
Cliff GaliherConnect With a Mentor Commented:
Grope policy doesn't have its own "tree." The GUI reads the OU structure from Active Directory. If you change/rearrange the stricture in AD, you'll see that change in GPMC.
MdlinnettConnect With a Mentor Commented:
One thing I was taught was to base your AD structure around your Group Policy requirements.  There is little point in having an overly complex AD structure if it's not required.

As Cliff has rightly said, the GUI mirrors AD, you can't have 2 different structures.
Nick SrinCommented:
what you can do is download active directory health profiler and execute stale gpo dynamic pack to get you list of unused and very less used gpos. next execute ou-gpo dynamic pack to get you see what has already been done and then execute gpo-advise dynamic pack to help you understand mappings between ous and gpos
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.