Applying file permissions via Group policy and potential performance issues.

Discussion in 'Active Directory' started by James, May 27, 2004.

  1. James

    James Guest

    I am planning to manage file system ACLs via group policy for all servers in my organisation. A collegue has raised a concern that using this approach has the potential to cause performance problems on servers as the Group policy would be re-applied to the server on a regular basis causing the re-ACLing of all files/folders defined in the GPO

    Does my collegue have a valid concern? Anyone out there doing this now

    James, May 27, 2004
    1. Advertisements

  2. Your colleague definitely has a valid concern. I inherited (briefly) an
    AD implementation wherein just what you mention had been done (to an
    absolutely ridiculous extent). Group policy refresh caused some very
    serious performance hits in the environment.

    Laura A. Robinson [MVP], May 27, 2004
    1. Advertisements

  3. On Thu, 27 May 2004 12:08:04 -0400, Laura A. Robinson spoketh
    I was under the impression that during a normal GPO refresh, only
    changes to the policy was processed, not the entire policy. Shouldn't
    that imply that ACLs should not be reapplied to the filesystem (or
    anything else) unless the ACLs have been changed?

    Lars M. Hansen
    (replace 'badnews' with 'news' in e-mail address)
    Lars M. Hansen, May 27, 2004
  4. The ACLs are checked to see if they match, as I recall.

    Laura A. Robinson [MVP], May 27, 2004
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.