There is one really important aspect of modifying Group Policy that probably needs to go in the GPO 101 post, but it’s important enough that I’ll post about it here.

Never, EVER modify the Default policy objects. There’s a reason they’re called Default, and they should stay that way.
Read the rest of this entry »