Mastering Active Directory - Second Edition

Flexible targeting

At the beginning of this section, we learned about how group policies can be used to enforce standards. In a business, some of these standards apply to the entire organization, and others can be specific to departments, business units, or users/device groups. Group policies allow us to apply different policies based on AD sites, domains, organization units, or groups. As an example, devices in the IT department can have different firewall settings to the sales department.

We can create two group policies to cover the previous requirements and link them to a relevant organization unit. As well as the standards, this flexible targeting also allows us to apply different system settings for specific audiences. As an example, ...