Best Practices for Group Policy
The following best practices should be used for Group Policy:
Use block inheritance, no override, and loopback sparingly. Their use makes the results of GPO application difficult to predict.
Limit the number of GPOs applied to user and computer accounts. The more policies that are applied, the harder it is to determine what will happen, and the longer policy application may take.
Do not use GPOs to do extensive file system and registry ACL assignment. Security settings in a GPO are applied every 16 hours. If these permissions are extensive, in a large enterprise, they can increase replication latency and possibly have a significant impact on DC performance.
Use implicit deny where possible instead of explicit deny. ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access