Forum Discussion

Tim Hunter's avatar
Tim Hunter
Iron Contributor
May 01, 2019

Single GPO vs. Multiple GPOs

I am pretty new to setting up Group Policies. Is it better practice to have mulitple GPOs rather than one GPO. For example, should I have seperate GPOs for mapped drives, windows updates, mapped printers, etc. or is it okay to make one "big" GPO with all these paramaters? Thank you very much!

Active Directory
Group Policy

1 Reply

Sort By
  • Fobes's avatar
    Fobes
    Copper Contributor
    Jul 07, 2020

    Tim Hunter 
    imo, there is a place for both. it depends on your size and set up of your environment. If you have a single location with all your users, then bandwidth to dl/pull the gpo data from your DC should not be a problem - then a single gpo can work...

     

    but

     

    if your users are spread and you have a centralized topology, then you may find performance challenges - here a set of single gpo's with the correct configuration (gpo refresh intervals, apply once and do not reply, registry vs windows settings) may be beneficial.

     

    Good Luck. 

Resources