Group Policy is a centralised way to manage user and system permissions on a variety of devices. The network administrator controls and applies configurations, without disruption to the user or having to physically manage each device separately.
How does it work?
Group Policy (GPO) is applied to groups of computers or users using a central console provided by Windows Server. Depending on the nature of the policy, user or machine, the policy would be applied in the background or upon start-up/login.
In order for Group Policy to reach your device, it needs to be connected to the local area network and in an Active Directory environment. This is different for something like Intune, which is cloud-based and focussed on devices that don't connect to the traditional network regularly.
When would you use it?
Some examples of GPO usage would be centralised drive mapping controls, software installations, printer configurations, and password policy application. Depending on the nature of the policy, user or machine, the policy would be applied in the background or upon start-up or logon.
What about devices that are used away from the office?
This would mean that if you take your device offsite (e.g. in a working remotely scenario), it won't have policy modifications applied until it returns to the local network.
Microsoft Intune vs GPO: What's best for your business?
