Learning Network Manager Thread, GPO Management in Technical; I have recently become the network manager of a school. I have inherited a DC with pretty much all policies ...
7th December 2012, 04:16 PM #1
- Rep Power
I have recently become the network manager of a school. I have inherited a DC with pretty much all policies rolled into one or two default GPOs. The logons take FOREVER.
I just wanted to know how other people manage their GPO's. Do you do the same or are you a one GPO per policy person. Or do you have another way.
7th December 2012, 04:23 PM #2
I tend to roll all my installs into one policy, all my lockdowns into one policy (one each for staff & students), but create individual policies for anything more specific ie per application firewall rules.
7th December 2012, 04:30 PM #3
- Rep Power
Thank you for your response. I will take this into consideration. Do you find logons are quick this way?
7th December 2012, 04:35 PM #4
We do pretty much the same here as fairm010, we have a whole domain policy (not the Default), then one for all PCs. We then have separate for Staff and Student PCs, separate for Staff and Student users, and I have a few separate policies for things like enabling Aero so I can apply a WMI object to it. GP installs are in separate policies each, for use when needed. In total, a logged on user will have five or six GPOs applied. Logons take between 15-40 seconds depending on the speed of the machine and whether the profile is cached etc. Total sysvol size is around 200MB.
7th December 2012, 04:38 PM #5
We have Win 7 clients with 08R2 and a gigabit network and tend to find logins take 20 seconds ish. Also depends if you use profiles or redirected desktops or the likes. Just taken over a new school where the old tech had made a new GPP for literally EVERYTHING. Every individual lockdown change he had a seperate policy for, logons took 4 mins +!
13th January 2013, 11:34 PM #6
GPO's here are done by department, for Sales we have different GPO's for software installs, internet properties etc etc and the same with other departments, we even have GPO's by group so that certain groups of users have certain policies. We have the Staff groups then we have Staff GPO's for installs etc.
By OutLawTorn in forum Windows
Last Post: 5th March 2014, 05:10 PM
By jahilton2002 in forum Windows Server 2008 R2
Last Post: 29th March 2012, 04:38 PM
By sparkeh in forum Wireless Networks
Last Post: 18th July 2007, 10:47 AM
By RobC in forum Windows Vista
Last Post: 7th July 2006, 10:42 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)