Calling all GPO experts

[Rockstar101]

question: I am working on the best way to streamline our GPOs. By streamlining I mean taking a GPO and removing settings that are not necessary within it. I was actually thinking about creating a custom ADM template for system.adm because we're only using about 10 setting in this template and it seems like a waste, why not create another adm template to only consist of only those few settings....? Those this sound like a good idea or feasible?

Does anyone know of any best practices when it comes to streamlining GPOs.

Thank you!

 

[PScottC]

There's no point in doing that. If you are trying to reduce the size of your sysvol, there is no harm in removing the ADM files from the GPO folder after you have configured the settings.

When you modify your GPOs, the ADM simply provides instructions to the interface you are using (MMC). After the change is made, it is stored in a .pol file which is downloaded by the client PCs.

The argument for removing the ADMs is so that your SYSVOL will be smaller on your DCs and will replicate faster.

The argument against removing the ADMs is that if a custom ADM created the policy in the first place, you may not be able to modify that policy later. The reason being, that when you modify the policy, the system doing the modification will download the ADM files from the sysvol instead of using the local copy contained in %systemroot%\inf.

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[markdmac]

I'd recommend you read my FAQ on the subject. faq329-6116

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[Rockstar101]

just wanted to make sure I had a chance to say, "Thanks" for ya'lls help with this.