Applying file permissions via Group policy and potential performance issues.

I am planning to manage file system ACLs via group policy for all servers in my organisation. A collegue has raised a concern that using this approach has the potential to cause performance problems on servers as the Group policy would be re-applied to the server on a regular basis causing the re-ACLing of all files/folders defined in the GPO

Does my collegue have a valid concern? Anyone out there doing this now

regard
James

 

Your colleague definitely has a valid concern. I inherited (briefly) an
AD implementation wherein just what you mention had been done (to an
absolutely ridiculous extent). Group policy refresh caused some very
serious performance hits in the environment.

Laura

 

On Thu, 27 May 2004 12:08:04 -0400, Laura A. Robinson spoketh

I was under the impression that during a normal GPO refresh, only
changes to the policy was processed, not the entire policy. Shouldn't
that imply that ACLs should not be reapplied to the filesystem (or
anything else) unless the ACLs have been changed?


Lars M. Hansen
http://www.hansenonline.net
(replace 'badnews' with 'news' in e-mail address)

 

The ACLs are checked to see if they match, as I recall.

Laura