Default Domain Policy
-
Before I started working where I am at, Most GPOs were created in Default Domain Policy. Slowly, I have been creating separate GPOs that logically make sense. Once I have these created, I have been removing them from the Default Domain Policy.
Are there any settings that need to stay in Default Domain Policy?
-
Not that I'm aware but I can't say that with 100% certainty.
-
@IRJ No, none need to stay there unless you want something that applies completely across the board.
-
What Scott said. I've been lucky, I caught our main systems admin starting to do this and we had a little talk. I'm now teaching him gpo.
-
That's what I thought. Thanks for confirming.
-
I incorrectly started my GPOs in the default GP 10 years ago... like you I've moved away from this practice completely allowing me greater flexibility where needed.
