Windows Server® 2012 Unleashed

Best Practices

The following are best practices from this chapter:

• The only changes that should be made to the default domain policy should be modifying the password and account policy settings and nothing else.

• When the local or domain Administrator user account is a member of a group that will be managed with domain group policy restricted groups, do not count on the GPO to leave it in; instead, define it within the member policy setting of a restricted group.

• When naming group policies, try to use naming conventions that easily identify the function of the policies for the organization.

• When using folder redirection for user profile folders, allow the system to create the folders and ensure that the share and root folder permissions ...