Windows Server® 2012 Unleashed

GPO Filtering

Applying GPOs can be tricky, and the design of the Active Directory forest, domains, sites, and OU hierarchy plays a major part in this. One of the most important considerations when designing the Active Directory OU hierarchy within a domain is to understand how the domain administrators plan to manage the domain computers and users with group policies. Designing the Active Directory infrastructure is discussed in detail in Chapters 5, “Designing a Windows Server 2012 Active Directory,” and Chapter 6, “Designing Organizational Unit and Group Structure.”

In many cases, even with the most careful planning of the Active Directory infrastructure, GPOs will be applied to computers/users that do not necessarily need the settings contained ...