Microsoft® Windows® Group Policy Guide

Summary

Deploying GPOs is not a simple task. Effective deployment involves factors well beyond the settings that are configured in the GPOs. These factors include Active Directory design, delegation considerations, replication, and convergence of Active Directory to all domain controllers.

You must also consider Group Policy inheritance and application controls to ensure that the deployment of the production GPOs is stable, secure, and efficient. Default inheritance should be left in place unless you absolutely need to implement GPO filtering, enforce GPOs, or use No Override. WMI filters should also be avoided if possible because they can degrade the performance of GPO application.

Finally, all GPO settings should be tested in a nonproduction environment ...