Best Practices
The following are best practices from this chapter:
• The only changes that should be made to the default domain policy should be modifying the password and account policy settings and nothing else.
• When the local or domain Administrator user account is a member of a group that will be managed with domain group policy restricted groups, do not count on the GPO to leave it in; instead, define it within the member policy setting of a restricted group.
• When naming group policies, try to use naming conventions that easily identify the function of the policies for the organization.
• When using folder redirection for user profile folders, allow the system to create the folders and ensure that the share and root folder permissions ...
Get Windows Server® 2012 Unleashed now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.