Anything to watch out for running dcgpofix

[BHX90]

Hi,

I've taken over a Windows 2003 Server network and AD only has one group policy, the Default Domain Policy. This has entries for firewall configuration, login scripts, office paramenters and plenty of other stuff that is causing problems for different users.

My plan is to create new group polices for each type of computer for example separate OU's for laptops, workstations and member servers and re-instate the Default Domain Policy using dcgpofix.exe.

I have two questions:

1. Is there anything to watch out for running dcgpofix.exe
2. Where is the best place to create the new GPO's on each OU or in a separate OU called Group Polices and link them to the relevant OU?

Any other advice or recommendations will be welcome.

Thanks