Shared vs. dedicated GPOs

[Mscislaw Krol]

I am a SysAdmin for a large organization with AD. Some
time ago I've been asked to develop a set of GPOs for 2500
users split among multiple sites/OUs.
Most of the policies are identical, so I decided to use a
shared GPO scheme i.e. one GPO linked to multiple OUs
(actully multiple GPOs, that are attached to one OU,
linked to multiple OUs)
Now, Domain Admins are telling me that I should not have
done that; shared GPOs are bad, evil, they do not
recommend it, period. They did not give me any reasons...
Do you have an opinion that is based on experience?
Mscislaw

 

[Curtis Clay III [MSFT]]

It all depends on who manages the GPO. If you have multiple policy admins
then yes, shared GPOs may not be the route to pursue.