Do not modify the Default Domain policy objectsChanges made to the default policies are difficult to test and undo if problems are encountered.
Adding additional group policy objectsEven though you should create separate GPOs to contain unique policy groups, having too many GPOs in Active Directory significantly slows down logon times for users.
Do not use dcgpofix to recover from group policy problemsdcgpofix should only be used as a last resort because it does not "fix" SBS-specific policies when it runs.
