TwistedHelixis Posted January 10, 2019 Posted January 10, 2019 Just taken over a small primary school from the LA and they have almost all the GPOs listed under the Domain OU and not inside OUs further down the tree. At my other schools I have perhaps 3 listed under the domain OU but all the others are in specific OUs. I would say that 90% of the GPOs are under the domain and wondered how normal this is?
fiza Posted January 10, 2019 Posted January 10, 2019 Having the GPOs under the domain OU means the GPOs apply to everything underneath unless the individual security filtering of each GPO has been altered. I put GPOs at the the level they need to be applied. For us the only GPO directly under the domain is 'Default Domain policy'. All others are further down depending on where they need to be applied. 2
HPlum78 Posted January 10, 2019 Posted January 10, 2019 That depends... They can all live there and use wmi filtering to apply to the correct users/ machines. Or you can place them at the level they are going to be applied at. If that is inedeed what is going on. Personal preference I would say. But not something I have seen very often.
TwistedHelixis Posted January 10, 2019 Author Posted January 10, 2019 Well it gets worse, just noticed the servers have not had ANY windows updates since last April, and also noticed the VM snapshots go back many many years and have never been merged. This place is like an onion, you peel back a layer and find another issue. 1
TwistedHelixis Posted January 10, 2019 Author Posted January 10, 2019 Question is do you keep looking or not? Good question. I am the type of person that will not sleep knowing one of my schools is not up to scratch, so will keep looking and adding to my jobs list.
FN-GM Posted January 10, 2019 Posted January 10, 2019 also noticed the VM snapshots go back many many years and have never been merged. They will take yonks to merge back!
TwistedHelixis Posted January 10, 2019 Author Posted January 10, 2019 They will take yonks to merge back! and that is if the merge works. I have had a few that corrupted while merging lots snapshots in the past. One for the holidays
DrBeaker Posted January 10, 2019 Posted January 10, 2019 ...This place is like an onion, you peel back a layer and find another issue. I feel your pain, believe me. The more I ask and play detective, the more crap and poor practices I'm finding! 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now