I do not understand why we are not able to assign multiple policies to each group of computers. For management reasons it is much easier to split different requirements into different policies. Then when you need to adjust the need for a given problem it is much easier to adjust 1 small policy then to have to go through the 1 large policy that has multiple desires. Just like an AD GPO each additional GPO is laid on top the others to get a complete configuration on each of the workstation. If you have a requirement for 1 department but not another, and 1 single computer is actually used in both departments then you are going to want both policies to be applied for just that 1 computer and not every computer on the network.
↧