Topic Hub
Group Policy
Published Group Policy coverage currently on AdminSignal is two diagnosis articles — RSoP/gpresult and GPO not applying — plus coexistence notes in the Intune Settings Catalog migration guide.
2 curated AdminSignal guides and signals on this topic
Start with scope and evidence, not gpupdate
Most Group Policy failures are scope problems: wrong OU, blocked inheritance, security filtering, WMI filters, loopback mode, or a competing cloud policy. Collect RSoP or gpresult evidence before forcing another refresh cycle.
Coexistence with Intune and security baselines
Treat GPO and Intune Settings Catalog as one control plane in design reviews. Duplicate settings create conflict winners that are hard to explain to helpdesk and auditors. Inventory overlapping controls before hardening or migrating baselines.
What this hub currently publishes
Two diagnosis articles are live: Group Policy troubleshooting with RSoP and gpresult, and Group Policy not applying. Coexistence with Intune is covered in the Settings Catalog migration guide. There is not a GPO design catalogue or a loopback-mode tutorial yet.
When not to add another GPO
Do not create one-off GPOs for single machines or temporary exceptions without an expiry owner. Prefer a pilot OU, security group filtering, or an Intune assignment group with a removal date. Unowned exceptions become permanent drift.