none
few questions on GPO practices

    Question

  • what will be considered as best practice and pros
    and cons if any:

    1. 3 computers and 3 users GPOs should be created
    My understanding

    just example:

    a) 1 GPO that includes all (3+3)

    if 3 users GPO are related to different IE settings and computer GPOs is
    related to IE too it will be appropriate to create ONE GPO with all 3+3.

    Is there any impact on end points in case of 1 GPO with 6 above
    settings vs 6 GPOs with 1 setting each?

    2. Example: need to apply Registry change on clients machines.
    Is there any difference in load/processing time between:

    GPO that will run the script on LOGON and GPO
    with preferences\Registry configured to make change on target
    pc?

    Thanks.

    --- When you hit a wrong note its the next note that makes it good or bad. --- Miles Davis

    Thursday, February 26, 2015 1:16 PM

Answers

  • 1. It depends on how often the settings are changed. Most of the time, I prefer sticking user settings in a GPO linked just to my user OUs and computer settings in a comptuer GPO linked to a computer OU. Read this as well:

    http://technet.microsoft.com/en-us/magazine/2008.01.gpperf.aspx

    2. Registry preferences would be better. They can apply in the background so users don't need to logoff/log back on for it to apply. They are also easier to manage - you see the settings in a GUI instead of digging in a script.


    If my answer helped you, check out my blog: Deploy Happiness

    • Marked as answer by pob579 Wednesday, March 04, 2015 12:15 PM
    Thursday, February 26, 2015 1:25 PM

All replies

  • 1. It depends on how often the settings are changed. Most of the time, I prefer sticking user settings in a GPO linked just to my user OUs and computer settings in a comptuer GPO linked to a computer OU. Read this as well:

    http://technet.microsoft.com/en-us/magazine/2008.01.gpperf.aspx

    2. Registry preferences would be better. They can apply in the background so users don't need to logoff/log back on for it to apply. They are also easier to manage - you see the settings in a GUI instead of digging in a script.


    If my answer helped you, check out my blog: Deploy Happiness

    • Marked as answer by pob579 Wednesday, March 04, 2015 12:15 PM
    Thursday, February 26, 2015 1:25 PM
  • in multi sites example when users are in USERS OUs of each site. User GPO will be applied on Domain Level.

    Is there difference in processing time of one User GPO containing 3 different by role settings (example: screen saver, IE settings, and fonts) and 3 GPOs for each mentioned setting?

    thanks for sharing...


    --- When you hit a wrong note its the next note that makes it good or bad. --- Miles Davis

    Thursday, February 26, 2015 1:34 PM