| Author | Messages | |
The Mariners Wife
Posts:1
 | | 08/06/2010 3:57 PM |
| Hi
First post here so hoping I don't break with any etiquette.
W2K3 AD Domain
7 Locations
800 Users
I look after the group policies here. Boss has gone on a Training course and the inevitable has happened .... Someone has told him that all policies are read everytime they are refreshed, and that if you have over a Gb of policy then you will suffer from 'dreadful' performance.
I don't believe we do that much via GP here, we have around 20 separate policies, some user, some computer. I decided to go for one generic user policy to cover the common ground ie. "Primary User Policy" then add local variants into the mix with things like "Manchester User Policy".
AD looks a little like this (Group Policies in brackets)
local.here.com
- London
- Desktops (Primary Desktop Policy)
- Laptops (Laptop Policy)
- Users (Primary User Policy)
- Manchester
- Desktops (Primary Desktop Policy), (Manchester Desktop Policy)
- Laptops (Laptop Policy)
- Users (Primary User Policy), (Manchester User Policy)
First, I would like to understand how policies are read and applied. The Boss seems to understand that regardless of a Users OU, all policies are read, some are applied, and ones that do not apply are discarded. eg a London User would be sent The Primary User Policy and the Manchester User Policy, the London one would be applied and the Manchester one discarded. The 'problem' being that an awful lot of wasted resource is being used up reading Group Policies. Hence, the second question.
Second, I would like to know how big (in Mb) my Group Policies are. Is it just a matter of looking at the size of \\domain_controller\SYSVOL\local.here.com\Policies
Thanks for reading this far.
TMW
ps . I don't expect the whole answer, as I will gladly read around the subject, so pointers, links to other resources etc. very much appreciated.
____________________________________________________________
Share photos & screenshots in seconds...
TRY FREE IM TOOLPACK at http://www.imtoolpack.com/default.aspx?rc=if1
Works in all emails, instant messengers, blogs, forums and social networks.
| | | |
| dmarelia
Posts:441
| | 08/06/2010 3:59 PM |
| Hey there. Not sure what to call you except TMW  . Welcome to the list. So the short answer is that under normal circumstances GP processing only applies settings if "something" has changed within the policies being applied. That something could be a GPO setting change, a security filter change, link or unlink of a GPO, etc.
Also, in terms of determining size of GPOs, yes, for the most part, the contents under the SYSVOL folder for a given GPO is indicative of its size, but doesn't necessarily translate into performance at the desktop.
You might want to check out these, which I've written over time that talk about how GP processing works:
http://technet.microsoft.com/en-us/magazine/2008.01.gpperf.aspx
http://www.windowsitpro.com/article/group-policy/troubleshooting-a-group-policy-processing-error.aspx
Darren
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of The Mariners Wife
Sent: Wednesday, June 02, 2010 9:49 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] How Group Policies are applied
Hi
First post here so hoping I don't break with any etiquette.
W2K3 AD Domain
7 Locations
800 Users
I look after the group policies here. Boss has gone on a Training course and the inevitable has happened .... Someone has told him that all policies are read everytime they are refreshed, and that if you have over a Gb of policy then you will suffer from 'dreadful' performance.
I don't believe we do that much via GP here, we have around 20 separate policies, some user, some computer. I decided to go for one generic user policy to cover the common ground ie. "Primary User Policy" then add local variants into the mix with things like "Manchester User Policy".
AD looks a little like this (Group Policies in brackets)
local.here.com
- London
- Desktops (Primary Desktop Policy)
- Laptops (Laptop Policy)
- Users (Primary User Policy)
- Manchester
- Desktops (Primary Desktop Policy), (Manchester Desktop Policy)
- Laptops (Laptop Policy)
- Users (Primary User Policy), (Manchester User Policy)
First, I would like to understand how policies are read and applied. The Boss seems to understand that regardless of a Users OU, all policies are read, some are applied, and ones that do not apply are discarded. eg a London User would be sent The Primary User Policy and the Manchester User Policy, the London one would be applied and the Manchester one discarded. The 'problem' being that an awful lot of wasted resource is being used up reading Group Policies. Hence, the second question.
Second, I would like to know how big (in Mb) my Group Policies are. Is it just a matter of looking at the size of \\domain_controller\SYSVOL\local.here.com\Policies
Thanks for reading this far.
TMW
ps . I don't expect the whole answer, as I will gladly read around the subject, so pointers, links to other resources etc. very much appreciated.
____________________________________________________________
Share photos & screenshots in seconds...
TRY FREE IM TOOLPACK at http://www.imtoolpack.com/default.aspx?rc=if1
Works in all emails, instant messengers, blogs, forums and social networks.
| | | |
|
|