Any downside to applying GPOs to different desktop versions of Windows via Security Group instead of OU?

hello,

any downside applying baseline gpo settings , few preference items via security groups instead of ous?  example, windows 7 computer objects in secgroup1, windows 8.1 computer objects in secgroup2, , windows 10 computer objects in secgroup3.  each of these groups act security filter application of set of baseline gpo settings each version of desktop os apply few gpp items. we've specified don't need 'delegate control' of permissions functions, thinking easier apply gpos via security groups instead of ous.

---

thanks help! sdedot

hi sdedot,

from technical viewpoint there's no functional difference, however, workflow process you'll creating step followed no gain. might make 1 step harder (insofar people forget things , isn't normal paradigm) spot policy application issue.

as aside, i'm curious why you're using separate group policy baselines per operating system begin with? can understand separate 1 windows 10 @ moment hasn't rtm'd, windows 8.1 , 7 it's more practical maintain 1 policy while sticking editing windows 8.1 or server 2012 r2 machines.

anyhow, aside work mentioned above, can't think of downside.

cheers,
lain

Windows Server  >  Group Policy