Multi site group policy - best practices question.

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hello,

We have a multi-site singe domain organization, with each site having some
specific "users" group policy requirements that the other sites do not.
Accordingly, we have create a separate OU for each site, and divided each
using sub-OU's for users, computers, etc.

I've identified a set of policies that are common to both site's "users" OU,
and my plan is to create a generically named policy and link it to each
site's corresponding OU, leaving those items which are NOT common, in the
"not configured" state.

For the policies that are site specific (e.g. Folder redirection), I'm
proposing to create a separate GPO and link it to the appropriate OU,
placing it second in the order of application.

Is this best practice when it comes to group policy application? From the
research I've conducted before posting, it appears so, but I'm am not
totally convinced.

Any feedback would be most appreciated.


.

Relevant Pages

  • RE: Framework Unregistered after Reboot
    ... Common if the application is not installed with Group Policy, ... you call aspnet_regiis -i and after you reboot and the problem reoccur? ... Also it seems to be a hard reproduce scenario. ...
    (microsoft.public.dotnet.framework)
  • RE: Cannot Create Group Policy - Access Denied
    ... any warning/error. ... "Fatih" wrote: ... > They have nothing in common but suddenly I cant create new group policys but ... > Group Policy management I am getting the information dialog with the title ...
    (microsoft.public.win2000.group_policy)
  • Re: Boy, did I screw up some Group Policies!
    ... Create a new Group Policy for each set of policies you want to enforce. ... (There follows a number of specific policies set under Administrative Templates in the Group Editor.) ... I did all this work from the Domain Controller console, logged in under the Domain Administrator account. ... Now I'm a security novice, so it made no sense to me that after I made these changes, when I logged into a workstation as the Domain Controller, I had no Task bar context menu and no Control Panel. ...
    (microsoft.public.win2000.group_policy)
  • Re: password to expire in 2 days ... will laptop be inexcessable?
    ... This will reveal my general ignorance concerning Group Policy, ... Pro stand-alone (i.e. workgroup) box, the "password age" policy is not ... In Group Policies, none of the various settings is enabled. ...
    (microsoft.public.windowsxp.general)
  • RE: Error adjusting Group Policies
    ... But you should never change those policies. ... It will reset the ... How To Reset User Rights in the Default Domain Group Policy in Windows ... PLEASE NOTE the newsgroup SECURE CODE and PASSWORD were ...
    (microsoft.public.windows.server.sbs)