I am new to group policies and currently I am exploring my options.
In my case, I have created an organizational unit (MyTestAcct) alongside with users too.
Currently I am testing by imposing app restriction such as users will not be using the Task Manager.
For that, I have created a GPO (enforced and linked) named App Restrict
that removes the Task Manager for users listed under MyTestAcct
.
In the event, if I decided to add more restricting features such as setting wallpaper, remove recycle bin etc, should I create new GPOs for per restriction? Or should I append these restrictions into the existing GPO (App Restrict
) I have created?
I tried both methods, and both works to my cause, but would like to know if there are any pros/cons between the two.
question from:
https://stackoverflow.com/questions/65921330/should-a-gpo-contains-all-the-restrictions-or-create-multiple-gpos-for-each-rest 与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…