Group Policy FAQ -3

3. What should I consider when deploying Group Policy?

This will vary depending on your delegation and organisation requirements, however some common pointers are

• Use the Default Domain Policy solely for Domain Account Policy settings, remember all settings in this policy are applied to all Users and Computers in the domain so you should limit the amount settings made in this GPO
• Use OUs to group computer objects that will share the same configuration, an example would be to separate Clients from Servers
• Use OUs to group user objects that will share the same configuration, an example would be to separate Admins from Standard Users
• Make sure you allow for exceptions to the standard configurations you are applying
• Think about how you will implement group based filtering to further define the scope of a GPO
• Think about how you will implement WMI based filtering to further define the scope
• Take care in your design to reduce or eliminate altogether the use of ‘No Override’ and ‘Block Inheritance’
• Define a standard and descriptive Naming Convention for your GPOs

The following white paper will assist you further in your planning your deployment:

http://www.microsoft.com/downloads/details.aspx?familyid=3ada804c-ba20-479d-9014-8f29427f3d96&displaylang=en

Tags: Group policy, Group policy Editor, Group policy object, group policy object editor, group policy management console, Group policy commands, Group policy in windows 2003, Group policy in vista, Group policy in windows vista, Group policy settings, Group policy tools, Group policy in windows xp, Group policy viewer, Group policy view, Group policy software, Group policy monitoring, Group policy chaning, group policy change homepage, group policy settings not applying