Hacker News Reader

Still the king but developing/testing/debugging group policy issues is a miserable experience.

I disagree. Group policies are extremely straightforward to administer in my experience.

That depends on how fine grained your targeting rules are. They can get insane.

I always found it straight forward. Never had an issue and I've implemented my fair share on thousands on devices and servers.

Not an implementer of group policy, more of a consumer. There are 2 things that I find extremely problematic about them in practice.

- There does not seem to be a way to determine which machines in the fleet have successfully applied. If you need a policy to be active before doing deployment of something (via a different method), or things break, what do you do?

- I’ve had far too many major incidents that were the result of unexpected interactions between group policy and production deployments.

That's not a problem with group policy. You're just complaining that GPO is not omnipotent. That's out of scope for group policies mate. You win, yeah yeah.... Bye

Reply on news.ycombinator.com