Solved

Active Directory and Group Policy

Posted on 2016-08-12
3
62 Views
Last Modified: 2016-09-16
I'm working on cleaning up group policy and need to present my recommendations.  

Question:  Does the group policy tree have to be identical to our active directory tree?  In other words, if I would like to move the order in which the OU's are can I do that?  
or
Do I have to follow the exact order of the current active directory.
0
Comment
Question by:Mary Macchioni
3 Comments
 
LVL 57

Accepted Solution

by:
Cliff Galiher earned 250 total points
ID: 41753674
Grope policy doesn't have its own "tree." The GUI reads the OU structure from Active Directory. If you change/rearrange the stricture in AD, you'll see that change in GPMC.
0
 
LVL 5

Assisted Solution

by:Mdlinnett
Mdlinnett earned 250 total points
ID: 41753729
One thing I was taught was to base your AD structure around your Group Policy requirements.  There is little point in having an overly complex AD structure if it's not required.

As Cliff has rightly said, the GUI mirrors AD, you can't have 2 different structures.
0
 

Expert Comment

by:Nick Srin
ID: 41801938
what you can do is download active directory health profiler and execute stale gpo dynamic pack to get you list of unused and very less used gpos. next execute ou-gpo dynamic pack to get you see what has already been done and then execute gpo-advise dynamic pack to help you understand mappings between ous and gpos
0

Featured Post

Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A procedure for exporting installed hotfix details of remote computers using powershell
This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

825 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question