|Subject:||Global single domain AD group policy structure|
|Posted by:||Marc (Ma…@discussions.microsoft.com)|
|Date:||Wed, 20 Dec 2006|
We are designing a large AD Forest 70k+user accounts with an OU structure to
divide by continents then by country and then within each country users,
Within each country we would need to have different laptop and desktop
policies applied but with our current OU proposal we would need to link a
specific group policy for the laptop OU within each country.
- What would be the impact to linking the same laptop GP to each country say
-Wouldn't WMI filtering be an option to identify whether it is a laptop and
thus apply the GP at the root level from the continent OU?
- or move the computers Ou containing the laptop and desktops at the root
level OU instead of at each country level?