For IT admins, using GPOs to manage corporate devices and user configurations can be a challenge. GPOs provide a well-defined configuration for Windows systems and user-definable ADMX templates from third-party vendors for a variety of settings. Still, IT admins can run into challenges when applying GPO policy in various scenarios.
First, the group policies are Active Directory-based so they can only apply to machines that are added in and connected to AD. The policies cannot be applied easily to non-AD joined devices. With BYOD becoming more common in enterprise IT, figuring out how to manage and configure those machines can be a challenge.
Second, although the GPO definitions (templates) are fully customizable, internal needs sometimes require additional configuration of software that isn't fully defined in those GPOs. Consider the provisioning guide for Citrix Workspace app. Even though there are fully defined options in the GPO templates, registry-based configurations are sometimes still required.
Read More ...