I am a SysAdmin for a large organization with AD. Some
time ago I've been asked to develop a set of GPOs for 2500
users split among multiple sites/OUs.
Most of the policies are identical, so I decided to use a
shared GPO scheme i.e. one GPO linked to multiple OUs
(actully multiple GPOs, that are attached to one OU,
linked to multiple OUs)
Now, Domain Admins are telling me that I should not have
done that; shared GPOs are bad, evil, they do not
recommend it, period. They did not give me any reasons...
Do you have an opinion that is based on experience?
Mscislaw

It all depends on who manages the GPO. If you have multiple policy admins
then yes, shared GPOs may not be the route to pursue.
"Mscislaw Krol" <(E-Mail Removed)> wrote in message
news:116101c36273$ec4bfd70$(E-Mail Removed)...
> I am a SysAdmin for a large organization with AD. Some
> time ago I've been asked to develop a set of GPOs for 2500
> users split among multiple sites/OUs.
> Most of the policies are identical, so I decided to use a
> shared GPO scheme i.e. one GPO linked to multiple OUs
> (actully multiple GPOs, that are attached to one OU,
> linked to multiple OUs)
> Now, Domain Admins are telling me that I should not have
> done that; shared GPOs are bad, evil, they do not
> recommend it, period. They did not give me any reasons...
> Do you have an opinion that is based on experience?
> Mscislaw