Planning Gpos

By Author: iris
Total Articles: 286
Comment this article

For each site, domain, and OU, you must determine how Group Policy settings should be arranged into mcse 2008 exam. Base the arrangement of Group Policy settings on the users and computers that require them. You can arrange Group Policy settings in the following 'ways in a GPO:
Single setting GPO Contains a single type of Group Policy setting—for example, a GPO that includes only security settings. This model is best suited for organizations in which administrative responsibilities are task-based and delegated among several individuals.
Multiple setting GPO Contains multiple types of Group Policy settings—for example, a GPO that includes both software settings and application deployment,
or a GPO that includes security and scripts settings. This model is best suited for organizations in which administrative responsibilities are centralized and an administrator might need to perform all types of Group Policy administration.
Dedicated setting GPO Contains either computer configuration or user configuration Group Policy settings. This model increases the ...
... number of GPOs that must be applied when logging on, thereby lengthening logon time, but it can aid in mcitp 2008 troubleshooting. For example, if a problem with a computer configuration GPO is suspected, an administrator can log on as a user who has no user configuration GPO assigned so user policy settings can be eliminated as a factor.
Be able to determine how Group Policy settings should be arranged into GPOs based on the needs and requirements of an organization.
Decentralized GPO Design
With a decentralized GPO approach (see Figure 10-9), the goal is to include a specific policy setting in as few GPOs as possible. When a change is required, only one (or a few) GPO(s) have to be changed to enforce the change. Administration is simplified at the expense of a somewhat longer logon time (due to multiple GPO processing).
To achieve this goal, create a base GPO to be applied to the domain that contains policy settings for as many users and computers in the domain as possible. For example, the base GPO could contain corporate-wide security settings such as account and password restrictions. Next, create additional GPOs tailored to the common requirements of each OU, and apply them to the appropriate OUs.
This model is best suited for environments in which different groups in the organization have common Free A+ exam questions security concerns and changes to Group Policy are frequent.