GPOs linked at the site level can be used for printers, proxy and network settings, or other settings related to a specific site. The GPOs linked at a site container level apply to all computers at that site regardless of domain or forest membership. The following recommendations are related to site-linked GPOs:
- To manage site GPOs, you need to be a member of the Enterprise Admins or Domain Admins group in the forest root.
- Replication for domain controllers in different sites occurs less frequently than replication within a site.
- Replication for domain controllers in different sites occurs only during scheduled replication periods, which by default is set to three hours and is set in the Inter-Site Transports section of Active Directory Sites and Services.
- Care should be taken to ensure that GPOs aren’t accessed across a wide area network (WAN) link for performance reasons, although this can be mitigated with slow link processing, as discussed in the next section.
Understanding site-linked GPOs
