Hi,
Linking all the GPOs to the top structure of the domain. For each GPO, I will adjust security filtering to each different security groups.
Any permission I need to assign to the particcular machine or user, I will assign them to the group. Can help me think in what situation or what kind of setbacks I will face if I do it this way?