Best practice for incorrect group policy settings

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Hi all,

I've got a quick question about gpo settings. i took an practice test the other day and got a question about group policy and the jist was that a junior admin had setup 3 group policies and incorrectly assigned them to the root domain and I had to sort them out. It was one of those move answer from the right box to the left in order, first thing i did was to unlink to gpos, make some amendments to computer account OU's and then link the gpos to the correct ou's.

But I got the question wrong as the order was too order the computer accounts, link the gpos then unlink the wrong gpos.

so I was wondering is there a best practice for reorganising gpo's or had they just decided to do it that way for the question, as I thought my answer was the best as I unlinked removed the issues the gpos caused first and then put them in the right place.

 

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

You need to consider what a group policy actually does to the target computers. In essence it changes settings in the registry. So, if you unlink the GPO, it will not undo those changes, they will remain in effect.

 

hmm, yes thats a good point, I suppose my way of thinking was the question made out there was quite a few hundred users at the site, and I suppose I assumed that there would be people logging on and off quite regularly (maybe shift works), so i wanted to get rid of the problem first then fix it, but yes I do see your point. I'll take that as best practice next time i do a dummy test and see if I get any similar questions to try it out on.