Windows Administration Resource Kit: Productivity Solutions for IT Professionals

10-6: Create a Delegated Group Policy Management Hierarchy

Solution overview

Type of solution	Guidance
Features and tools	Group Policy delegation, starter GPOs
Solution summary	Delegate appropriate subsets of Group Policy management tasks.
Benefits	Realize the cost savings and manageability benefits of Group Policy.

Introduction

To this point in the Solution Collection, we have discussed GPOs linked very high in the Active Directory structure—to the domain and to the Domain Controllers OU. We used security groups to filter the effective scope of domain-linked GPOs. Linking GPOs to OUs to manage the GPOs' scope is nice because it saves a very small amount of processing over the evaluation of security group filters (GPO ACLs). But from a practical perspective—particularly ...