Background information on GPO’s
Group Policy Objects are a common part of most organizations IT policy, while they are a needed tool for controlling the desktop, applications and security settings presented to a user, they are also one of the most complicated and time consuming policies to set up and maintain in an enterprise environment.
The main challenge with GPO’s is quite simply the management overhead required to keep on top of the ever changing requirements of the enterprise. Given that Policy is typically applied [within the AD] at Domain level, Computer Organizational Unit (OU) level and at User OU level, it can easily and rapidly become a management nightmare to ensure that the complexity does not overcome the needs of policy configuration in the first place. This along with the GPO’s inability to have fine enough granularity (limited to AD Groups and OU as the means of depicting whether Policy is applied) make GPO’s a difficult method to accurately deliver the policy to the corporate end points and end users.
Managing GPO’s with AppSense Environment Manager.
AppSense Environment Manager resolves the above issues, reducing complexity and saving on time and cost by completely replacing the admin intensive process with an easy to use graphical user interface, complete with wizard based actions.
Actions can be selected and then applied at a user or device level, based on environment variables, without the need for any complex scripts. Furthermore, the GUI ensures consistency between Administrators, meaning any other support worker can quickly troubleshoot and amend any existing configuration.
AppSense Environment Manager builds on the GPO technology, but instead of relying on complex scripting and applying settings at an OU level or computer level, Environment Manager uses a GUI interface to present the administrator with an easy to read list of ADM templates and GPO settings, and then enables them to be applied at a user level based on a flexible rules list.
With the Environment Manager flexible rule set, Group Policy actions need not be applied at a group level.. but instead, to whoever or whatever you want..