999!!! Getting depressed just thinking about it....
But I was thinking of maybe doing, 1 time settings thru a startup script instead of GPO. Then again it would be hard the to check wich computers are 'compliant' and wich are not. Maybe SMS can help me doing that.... Still a lot of work ahead.. thks, Bart On Tue, 15 Feb 2005 08:26:02 +0100, John Reijnders <[EMAIL PROTECTED]> wrote: > Hi Bart, > > The *main* performance hit is caused by the actual settings set in a GPO, > *not* the number of GPO's. However, besides performance, managebility is > important thing to consider when you're designing your GPO structure. > > A limit you have to take into account is the maximum number of GPO's that > can be applied to a client is 999. But let's be honest ... if you have more > than 999 GPO applied to a client, you have a different kind of problem ;-). > > Cheers, > John > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Bart Vandyck > Sent: maandag 14 februari 2005 19:25 > To: [email protected] > Subject: Re: [ActiveDir] GPO design > > Hi Jorge, > > Great input.. But do i understand you correct that performance is > depended on the amount of different GPO instead of the settings done > by these gpo's? > > rgds, > > Bart > > On Mon, 14 Feb 2005 10:47:43 +0100, Jorge de Almeida Pinto > <[EMAIL PROTECTED]> wrote: > > Hi, > > > > Be carefull with creating a GPO for each application. If you have a lot of > > apps and lets say all computers get those apps then those wokstations will > > go through each GPO and then you may have performance issue. It may be > > better to consolidate several apps that have similar "characteristics" > into > > one GPO. > > If within a GPO the computer or user configuration is NOT used (not > settings > > defined) disable it accordingly. If it is disabled then it will not be > > processed and that is good for performance! > > > > The naming convention for GPOs I always use is: > > * GPO_<type>_<target>_<scope>_<description> > > > > Where: > > <type> = POL (policy settings) or SWD (software distribution) > > <target> = C (computer) or U (user) or B (both) this one also tells me > which > > configuration is enabled without opening the GPO > > <scope> = can be anything such as location, region, department, etc. > > <description> = what it is (e.g. default settings) > > > > Examples: > > GPO_POL_C_Dept01_DefaultSettings > > GPO_SWD_U_Site01_AcrobatReader > > > > As I think of it: don't go crazy on GPOs. GPOs provide lots of > functionality > > but may also kill performance > > > > Cheers, > > Jorge > > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Bart Vandyck > > Sent: maandag 14 februari 2005 10:22 > > To: [email protected] > > Subject: [ActiveDir] GPO design > > > > Hi all, > > > > I just wanted some feedback on this project I'm working on from people > with > > real world knowledge. > > > > We have AD in place with and OU structure. I've been asked the make plan > to > > implement GPO's in this organization. I was thinking about creating a GPO > > for each application we want to manage and this in combination with each > OU > > level. > > For example: GPO-Region-IE6-users > > GPO-Region-WINXPSP1-machine > > GPO-Site01-IE6-users > > GPO-Site02-IE6-machine > > GPO-Site01-winxpsp1-user > > > > The site GPO will only be made or in effect if the need to overrule > settings > > made on the region level. > > > > Is this a maintainable solutions or will this become to complex in the > end. > > > > Anybody know some good descriptions or best practices about managing > > software with GPO. I've seen lots of stuff about creating GPO's, > > troubleshoot them, etc.. but haven't found real implementations case > studies > > with advantages and disadvantages.. > > > > rgds, > > > > Bart > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > > This e-mail and any attachment is for authorised use by the intended > recipient(s) only. It may contain proprietary material, confidential > information and/or be subject to legal privilege. It should not be copied, > disclosed to, retained or used by, any other party. If you are not an > intended recipient then please promptly delete this e-mail and any > attachment and all copies and inform the sender. Thank you. > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > This e-mail and any attachment is for authorised use by the intended > recipient(s) only. It may contain proprietary material, confidential > information and/or be subject to legal privilege. It should not be copied, > disclosed to, retained or used by, any other party. If you are not an > intended recipient then please promptly delete this e-mail and any attachment > and all copies and inform the sender. Thank you. > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
