[bigstrat2003]

I disagree. Group policies are extremely straightforward to administer in my experience.

[UltraSane]

That depends on how fine grained your targeting rules are. They can get insane.