Different Group Policies for Different Classes of Machines?

[Will]

Is there any way to set up different group policies for different groups of
machines, based on function rather than based on the domain in which they
reside? Or is the idea that one must create as many subdomains as one
wants different group policies?

 

[Simon Geary]

You don't need different domains to use multiple Group Policies, it's pretty
easy to target specific groups of computers with certain policies. There are
three main ways to target a policy at a particular group of computers:

1. Put the computers in their own OU, and then link the Group Policy to that
OU.
2. Put the computer accounts in their own security group and then use
security filtering so the only machines applying the policy are the ones in
the security group.
3. Use a WMI filter so only computers that fulfil certain requirements (e.g.
at least 256Mb memory) apply the policy.