Best Practices for Group Policy in Active Directory

Question

Hi,

what do you think are the best practices to assign GPO in Active Directory?
I mean do you suggest to link GPOs to Security Groups or to Containers/OU?

Or it is quite the same from a security point of view and so it depends exclusively by cases?
Thanks,
Roberto

Answer 1

I find it easier to manage if you assign GPOs to an OU. When you don't need to target every user or computer in an OU then assign the GPO to a security Group or use security filtering.

Managing GPOs really depends on how your AD is structured. Good OU design will make managing GPOs much easier.