I have set about 10 group-policies, and it works OK.
Although, it would be interesting to see what kind of things IT-administrators enforce.
If you have a ton of policies, just show some, that you feel really changes something.
I guess you could avoid "default permit" -> block everything you can, and only keep things unlocked, that is directly needed.
This question refers to Windows Servers 🙂 Although I won't shun Mac nor Linux administrators.
Best Answer
I love Group Policy. It makes me able to do my job and to allow my company to leverage the collective talents of 3 people over more than 1,000 PCs and server computers in multiple Customer sites.
Nearly every one of my Customers has the majority of the following uses of Group Policy:
That's my "off the top of my head" list. I'll come back and revise if I think of more.