Linknig GP across domain

[Chuck]

We have about 20 child domains that all hang off of a
single parent domain. Need to define GPO's on the root of
each domain, and some other GPO's at various OU's.
Configuration of these GP's is identical to the parent
domain. Question is, are there any reasons why we
shouldn't link appropriate OU's (and root) of each domain
to the appropriate GP in the parent domain (performance or
otherwise)?

Domains are distributed across a WAN environment. There
are no GC's or DC's for the parent domain at each facility
where a child domain exists, and no GC's or DC's for the
child domains at the parent domain location. (So they are
somewhat isolated networks).

I'm thinking that linking GP's is going to be really slow,
and that the right thing to do is recreate these GPO's in
each domain for performance reasons.

Can someone sense check this for me??? TIA, Chuck

 

[Cary Shultz]

-----Original Message-----
We have about 20 child domains that all hang off of a
single parent domain. Need to define GPO's on the root of
each domain, and some other GPO's at various OU's.
Configuration of these GP's is identical to the parent
domain. Question is, are there any reasons why we
shouldn't link appropriate OU's (and root) of each domain
to the appropriate GP in the parent domain (performance or
otherwise)?

Domains are distributed across a WAN environment. There
are no GC's or DC's for the parent domain at each facility
where a child domain exists, and no GC's or DC's for the
child domains at the parent domain location. (So they are
somewhat isolated networks).

I'm thinking that linking GP's is going to be really slow,
and that the right thing to do is recreate these GPO's in
each domain for performance reasons.

Can someone sense check this for me??? TIA, Chuck
.

Chuck,

While I did not read all of your post ( thus, my reply
does not qualify for a "sense check" ) it is typically a
really bad idea to link a GPO from DomainA to DomainB.
What might be a better solution is to export it via GMPC
and then import it to "DomainB". It can get really very
hairy when linking GPOs from one domain to another.

Mind you, I have never made use of this procedure. There
are many others who have, though.

HTH,

Cary