Windows Performance Analyzer (WPA) has opened my eyes to a lot of things in the past week! For one, 30 seconds of our 40 second login was being eaten by GPClient. I noticed that we had a lot of GPOs linked to high level OUs even though only a few machines actually needed the policy.
The picture above shows an example. So how can I automatically find out what computers need which policy and then relink the GPO closer? Let’s script it!