+ Post New Thread
Results 1 to 7 of 7
Windows Server 2008 Thread, Number of Group Policy Objects in Technical; I am still a little new to Windows Server and Group Policy Objects. I am curious if there is a ...
  1. #1
    bmittleider's Avatar
    Join Date
    Jan 2009
    Location
    Nebraska
    Posts
    58
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Number of Group Policy Objects

    I am still a little new to Windows Server and Group Policy Objects. I am curious if there is a limit of how many Group Policy Objects should be used? I am trying to construct multiple GPOs to be applied based on user/computer group membership. I would like to create a Global GPO that handles the basics that are applied to all our users/computers but then I would like to have a separate GPO for students and faculty as they have different restrictions that extend the global GPO. I would also like to have a GPO that handles things like my printer mappings and drive mappings.

    With all that said I'll ask the question again. What is the limit for GPOs?

  2. #2

    featured_spectre's Avatar
    Join Date
    Nov 2008
    Posts
    12,503
    Thank Post
    1,684
    Thanked 2,054 Times in 1,491 Posts
    Blog Entries
    2
    Rep Power
    464
    I have a general PC GPO's, along with individual yer group GPO's and varying leeks of staff GPO's. EG admin staff get near admin level fo stuff like SIMs and FMS to work, but teachers are marginally aboe year 8 pupils in their restrictions. It's a case of how locked down you want them to be!

  3. #3
    bio
    bio is offline
    bio's Avatar
    Join Date
    Apr 2008
    Location
    netherlands
    Posts
    520
    Thank Post
    16
    Thanked 130 Times in 102 Posts
    Rep Power
    38
    There is a limit of 999 Group Policy objects (GPOs) that you can apply to a user account or computer account. This does not mean that the total number of policy settings on the system is limited to 999. Rather, a single user or computer will not be able to process more than 999 GPOs. This limit exists for performance reasons.

    Active Directory Maximum Limits Scalability Capacity

    bio...

  4. 2 Thanks to bio:

    AngryTechnician (22nd April 2010), bmittleider (26th April 2010)

  5. #4
    bmittleider's Avatar
    Join Date
    Jan 2009
    Location
    Nebraska
    Posts
    58
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Okay, well I don't have anywhere near 999 but I wasn't sure if 10-15 different GPOs were bad. I have only 1-4 applying to the specific groups/OUs. Thanks.

  6. #5
    macdaddy's Avatar
    Join Date
    Apr 2010
    Location
    New Hampshire
    Posts
    18
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Quote Originally Posted by bmittleider View Post
    Okay, well I don't have anywhere near 999 but I wasn't sure if 10-15 different GPOs were bad. I have only 1-4 applying to the specific groups/OUs. Thanks.
    You also may want to look into WMI Filter. I use it to apply with different OS's. Since we are running XP/7/2008 TS/2008 R2 TS the student policies are all slightly different. By using WMI Filter I have multiple policies but one OU.

  7. #6

    powdarrmonkey's Avatar
    Join Date
    Feb 2008
    Location
    Alcester, Warwickshire
    Posts
    4,867
    Thank Post
    412
    Thanked 778 Times in 651 Posts
    Rep Power
    182
    Regardless of actual limit, every applied GPO incurs some overhead, and on low-power machines it becomes noticeable at about seven or eight objects IME, so combining them where you can is wise. You need to find a balance between administrative flexibility and overhead.

  8. #7


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    7,059
    Thank Post
    232
    Thanked 926 Times in 795 Posts
    Rep Power
    309
    Quote Originally Posted by powdarrmonkey View Post
    Regardless of actual limit, every applied GPO incurs some overhead, and on low-power machines it becomes noticeable at about seven or eight objects IME, so combining them where you can is wise. You need to find a balance between administrative flexibility and overhead.
    its also worth disabling the user part if its a pc policy or pc part if its a user policy and dumping non needed admin templates. for instance i have a specific gpo for wsus (well 2-3 servers/workstation/staff laptops) so the general curriculum pcs policy dosent need the admin template wor windows update and dosent need any user settings which helps speed up proscessing



SHARE:
+ Post New Thread

Similar Threads

  1. Group policy
    By pedster666 in forum Hardware
    Replies: 5
    Last Post: 27th February 2008, 11:03 AM
  2. Group Policy
    By jman167 in forum Windows
    Replies: 1
    Last Post: 28th June 2007, 11:27 PM
  3. Group policy etc
    By moiebus in forum Wireless Networks
    Replies: 20
    Last Post: 9th November 2006, 12:48 AM
  4. Cannot Access group policy objects
    By timbo343 in forum Windows
    Replies: 35
    Last Post: 13th October 2006, 03:23 PM
  5. Group Policy
    By faza in forum Windows
    Replies: 15
    Last Post: 23rd May 2006, 10:39 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •