Single GPO vs. Multiple GPOs

%3CLINGO-SUB%20id%3D%22lingo-sub-507576%22%20slang%3D%22en-US%22%3ESingle%20GPO%20vs.%20Multiple%20GPOs%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-507576%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20pretty%20new%20to%20setting%20up%20Group%20Policies.%20Is%20it%20better%20practice%20to%20have%20mulitple%20GPOs%20rather%20than%20one%20GPO.%20For%20example%2C%20should%20I%20have%20seperate%20GPOs%20for%20mapped%20drives%2C%20windows%20updates%2C%20mapped%20printers%2C%20etc.%20or%20is%20it%20okay%20to%20make%20one%20%22big%22%20GPO%20with%20all%20these%20paramaters%3F%20Thank%20you%20very%20much!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-507576%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EActive%20Directory%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EGroup%20Policy%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1505949%22%20slang%3D%22en-US%22%3ERe%3A%20Single%20GPO%20vs.%20Multiple%20GPOs%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1505949%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F238560%22%20target%3D%22_blank%22%3E%40Tim%20Hunter%3C%2FA%3E%26nbsp%3B%3CBR%20%2F%3Eimo%2C%20there%20is%20a%20place%20for%20both.%20it%20depends%20on%20your%20size%20and%20set%20up%20of%20your%20environment.%20If%20you%20have%20a%20single%20location%20with%20all%20your%20users%2C%20then%20bandwidth%20to%20dl%2Fpull%20the%20gpo%20data%20from%20your%20DC%20should%20not%20be%20a%20problem%20-%20then%20a%20single%20gpo%20can%20work...%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ebut%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eif%20your%20users%20are%20spread%20and%20you%20have%20a%20centralized%20topology%2C%20then%20you%20may%20find%20performance%20challenges%20-%20here%20a%20set%20of%20single%20gpo's%20with%20the%20correct%20configuration%20(gpo%20refresh%20intervals%2C%20apply%20once%20and%20do%20not%20reply%2C%20registry%20vs%20windows%20settings)%20may%20be%20beneficial.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EGood%20Luck.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Super Contributor

I am pretty new to setting up Group Policies. Is it better practice to have mulitple GPOs rather than one GPO. For example, should I have seperate GPOs for mapped drives, windows updates, mapped printers, etc. or is it okay to make one "big" GPO with all these paramaters? Thank you very much!

1 Reply

@Tim Hunter 
imo, there is a place for both. it depends on your size and set up of your environment. If you have a single location with all your users, then bandwidth to dl/pull the gpo data from your DC should not be a problem - then a single gpo can work...

 

but

 

if your users are spread and you have a centralized topology, then you may find performance challenges - here a set of single gpo's with the correct configuration (gpo refresh intervals, apply once and do not reply, registry vs windows settings) may be beneficial.

 

Good Luck.