Group Policy Processing

By Author: Anny
Total Articles: 59
Comment this article

Group Policy Processing

As mentioned in earlier chapters, planning your OU structure is key to the efficient application of Group Policy. Every additional policy that you apply increases the number of settings that the individual computers must evaluate. Planning your organizational structure so that you can apply as few group policies as possible to only those containers that require them is a key to improving startup and logon performance. You might even decide to create OUs for the purpose of applying a specific Group Policy. For example, if you have several computer accounts that require a specific configuration that is unique to only those systems, you may find it N10-004 to create a separate OU in order to handle that special configuration.

Planning Administrative Control of GPOs

When you plan the Group Policy settings and GPOs to be used in your organization, you should also plan who will manage them. The appropriate level of IT Exams
control can be delegated by using a centralized, decentralized, or task-based ...
... administrative control design.

Centralized Administrative Control Design

In the centralized design, administration of Group Policy is delegated only to top-level OLJ administrators. In the example shown in Figure 10-10, top-level OU administrators have the ability to manage all GPOs in the domain. Second-level OU administrators do not have the ability to manage GPOs. You can accomplish this by assigning Full Control permission to top-level OU administrators. This design is best free Microsoft certification practice questions for organizations that want to consolidate the administration of group policies.

Decentralized Administrative Control Design

In the decentralized design, administration of Group Policy is delegated to top-level and to second-level OU administrators. In the example shown in Figure 10-11, top-level OU administrators have the ability to manage GPOs in the top-level OU. Second-level OU administrators have the ability to manage GPOs in their second-level OUs. You can accomplish this by assigning Full Control permission to top-level OU administrators for the top-level OU GPOs and Full Control permission to second-level OU administrators for their second-level OU GPOs. This design is best suited for organizations that delegate levels of administration.