That kinda explains why at my last job users had a big login delay, as it parsed through 136 GPOs on the Citrix Servers OU, most of which were either applied to everyone, or scoped via item-level targeting
On 5 November 2010 12:22, Stephen Wimberly <swimbe...@gmail.com> wrote: > We did the same kind of thing a while back, but a different point of > view. We wanted to limit the number of objects that a particular > computer would run, we did combine some policies but we also used > security filtering to limit the number of objects that a particular > computer would run. > > For example when we looked at login times a couple of years ago one > computer ran an average of 35 Policy Objects. > > Now each computer runs about 10 Policy Objects. > > The idea came from a Microsoft Rep that came to speak to our company > about Active Directory organization tactics. The basic idea is that > it takes about 5,000 lines of code to parse through a single GPO even > if it's just to get to the item level targeting within the GPP and > find that it just doesn't apply, but only a moment to attempt to open > one that it doesn't have access to, record the "Access Denied" and > move on to the next one. In essence taking 5,000 lines of code down > to "one line." > > Just another viewpoint. > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe ntsysadmin > -- "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question." ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
