Question.
Many organizations rely heavily on security group filtering to scope GPOs rather than linking GPOs to
specific go use in these organizations.
GPOs typically are linked very high in the Active Directory logical structure to the domain itself or
to a first level of view.
What advantages do you gain by using security group filtering rather than GPO links to manage a GPO
scope?
Answer.
The fundamental problem of relying on oh used to skip the application of GPOs is that an EU is a fixed,
inflexible structure within ads.
A single user or computer can exist within only one EU.
As organisations get larger and more complex, configuration requirements become difficult to match
in a 1 to 1 relationship with any container structure.
With security groups, a user or computer can exist in as many groups as necessary, and you can add
or remove them easily without impacting the security or management of the user or computer account.
Question Why might it be useful to create an exemption group, a group that has denied the apply group
policy permission for every GPO that you create?
Answer.
There are very few scenarios in which you can guarantee that all of the settings in a GPO will always
need to apply to all users and computers within its scope.
By having an exemption group, you will always be able to respond to situations in which you must exclude
a user or computer.
This also can help in troubleshooting, compatibility and functionality problems.
Sometimes specific GPIO settings can interfere with the functionality of an application.
To test whether the application works on a clean installation of the Windows operating system.
You might need to exclude the user or computer temporarily from the scope of GPOs.
Question Do you use loopback policy processing in your organization?
In which scenarios and for which policy settings can loopback policy processing add value?
Answer.
Answers will vary.
Scenarios could include in conference rooms and kiosks on virtual desktop infrastructure, computers
and in other standard environments.