Shared vs. dedicated GPOs

  • Thread starter Thread starter Mscislaw Krol
  • Start date Start date
M

Mscislaw Krol

I am a SysAdmin for a large organization with AD. Some
time ago I've been asked to develop a set of GPOs for 2500
users split among multiple sites/OUs.
Most of the policies are identical, so I decided to use a
shared GPO scheme i.e. one GPO linked to multiple OUs
(actully multiple GPOs, that are attached to one OU,
linked to multiple OUs)
Now, Domain Admins are telling me that I should not have
done that; shared GPOs are bad, evil, they do not
recommend it, period. They did not give me any reasons...
Do you have an opinion that is based on experience?
Mscislaw
 
It all depends on who manages the GPO. If you have multiple policy admins
then yes, shared GPOs may not be the route to pursue.
 
Back
Top