GPO - Best Practices

Posted by allenflame@reddit | sysadmin | View on Reddit | 15 comments

Is there any best practices for Group Policy Objects, when it refers to the number of policies? Is it better to create lots of policies that only do say 1-5 changes per policy, or have just a few policies that make 50+ changes? Does it matter if you have one per location for changes like Drive Mappings, or have one at the top level and filter them out with Item-level targeting? We've got probably 70 objects, and most have been in place since Windows 7. Every location has for example their own drive mapping object, their own WSUS object. I've made several over the years for Chrome Settings, Power Settings, and then I have some that I've just thrown settings in for a quick fix. I'm recreating a bunch (made backups first) and wanted to make sure I wasn't over thinking it.