GPO under COmputer or User

[Dan]

Is it better to have gpo's setup to be under the user or computer. Are there
any pro and cons to each.

 

[Derek Melber [MVP]]

There are very few settings that affect both the Computer and the User the
same. So, you won't have to make this decision much. You will either be able
to make a Computer OR a User setting.

 

[Dan]

When pushing out software with GPO is it better to create the package under
the User or Computer Section?

thanks

 

[Derek Melber [MVP]]

totally depends on what you want.

Computer - every user will get the software, that logs onto that computer
User - no matter which computer the user logs onto, the software is
available.

 

[Adam Arndt]

Another thing to remember is that SOME software will require that the user
be an Administrator. (new version of Internet Explorer) If this is the case
you may NEED to deploy software to computers, as opposed to users. (you
could additionally configure the setting to install software to users with
elevated privileges.) However, installing to computers is a more secure
option.

To reiterate: make sure that your AD Design ALWAYS facilicitates deploying
software to both Users AND Computers, or you will regret it down the line
and will end up adding hundreds of computers to custom groups and filtering.

Adam Arndt