Group Policy And The Active Directory

• Sites are described by Subnet address’s and may cross Domain boundaries, normally they would not

• The affect of a GPO may be filtered based on security group membership (ACLs)

• GPOs are per Domain

• Any SDOU may be associated with any GPO, even across Domains (slower - maybe very slow)

• Multiple SDOUs may use a single GPO

• Multiple GPOs may be associated with a single SDOU

What is my policy?

• Sites are described by Subnet address’s and may cross Domain boundaries, normally they would not

• GPOs are per Domain

• Multiple GPOs may be associated with a single SDOU

• Multiple SDOUs may use a single GPO

• Any SDOU may be associated with any GPO, even across Domains (slower - maybe very slow)

• The affect of a GPO may be filtered based on security group membership (ACLs)

Previous slide

Next slide

Back to first slide

View graphic version