Why Group Policy?

Okay, it's fair to say that I think group policy is neat. That is probably not enough reason, though, to read several chapters on the subject. How about this reason: Group policy enables you to enforce sameness, and when I say enforce, I mean it. If a computer or user is configured to receive group policy, there is no escape. The administrator for that site, domain, or OU is completely in control of who receives what group policy. Virtually any configuration setting can be set through group policy, and it requires no more administrative effort to assign group policy to 1,000 computers than it does to 10 computers.

Get Special Edition Using Microsoft Active Directory now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.