Windows Group Policy
Hacker ApprovedPolicy manager in Computers
Windows admins use it to centrally configure and lock down machines with fine-grained settings, and people say nothing on Linux matches it. Critics say it is hard to debug and its policies can conflict.
Windows admins use it to centrally configure and lock down machines with fine-grained settings, and people say nothing on Linux matches it. Critics say it is hard to debug and its policies can conflict.
25 people gave an opinion
- recommend it
- 17
- criticize it
- 8
- approval share
- 68%
Recommended in 7 of 13 months
- November 2025: recommended
- December 2025: recommended
- January 2026: recommended
- February 2026: not recommended
- March 2026: recommended
- April 2026: recommended
- May 2026: not recommended
- June 2026: recommended
- July 2026: not recommended
- August 2026: not recommended
- September 2026: recommended
- October 2026: not recommended
- November 2026: not recommended (month in progress)
Why it carries the badge
- 17 people recommend itNeeds 10 or more, met.
- 2.1 recommenders for every criticNeeds 2 to 1 or better, met.
- Recommended in 7 of 13 monthsNeeds 4 or more, met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
Fine-grained control over Windows settings
“GPOs are unbelievably configurable and you'd need to know lots and lots of registry lore to get close.”
Comment from 19 Jan 2026 in “Prediction: Microsoft Is Going to Do the Funniest Thing Imaginable” “Group Policy Edit is the way to restrict many things.”
Comment from 24 Dec 2025 in “The Windows Utility” “Group Policy's granular control over the endpoint”
Comment from 18 Jan 2026 in “Prediction: Microsoft Is Going to Do the Funniest Thing Imaginable” - Comment from 28 Jan 2026 in “Microsoft forced me to switch to Linux”
No Linux equivalent
“Linux still doesn't have anywhere near as nice and cohesive as Group Policy, Active Directory etc.”
Comment from 10 Apr 2026 in “France Launches Government Linux Desktop Plan as Windows Exit Begins” “I am a sysadmin and Group Policy is the entire moat Microsoft has. Linux has nothing like it”
Comment from 19 Jan 2026 in “Prediction: Microsoft Is Going to Do the Funniest Thing Imaginable” “Nothing come close to Active Directory + Group Policy, not even Entra ID + Intune.”
Comment from 29 Jun 2026 in “Microsoft Needs Windows Lite” Configurable without coding
“you should open the Group Policy Editor one time. Each property has some paragraphs for description.”
Comment from 12 Nov 2025 in “Terminal Latency on Windows (2024)” “Group/Local Policy especially, since it's effectively a zero coding required system.”
Comment from 23 Dec 2025 in “Meta is using the Linux scheduler designed for Valve's Steam Deck on its servers” “I always found it straight forward. Never had an issue”
Comment from 23 Dec 2025 in “Meta is using the Linux scheduler designed for Valve's Steam Deck on its servers” Standardizes corporate machine configuration
“modern MDMs & Group Policy (on the Windows side) make managing host firewalls easy enough”
Comment from 21 Jan 2026 in “IPv6 is not insecure because it lacks a NAT” “GPO essentially standardizes a lot of tooling that SIPB et al built for Athena as well”
Comment from 22 Sep 2026 in “What Sun got wrong” “you still need Group Policy to configure the VMs according to the corporate standards”
Comment from 17 Jan 2026 in “PCs refuse to shut down after Microsoft patch”
What people warn about
Each mark is one comment
Painful to manage and debug
“developing/testing/debugging group policy issues is a miserable experience”
Comment from 23 Dec 2025 in “Meta is using the Linux scheduler designed for Valve's Steam Deck on its servers” “Managing apps via group policy is painful”
Comment from 14 Oct 2026 in “Firefox Enterprise” “Group policy is an annoying pain”
Comment from 10 Apr 2026 in “France Launches Government Linux Desktop Plan as Windows Exit Begins” Policies conflict in surprising ways
“I’ve had far too many major incidents that were the result of unexpected interactions between group policy and production deployments.”
Comment from 23 Dec 2025 in “Meta is using the Linux scheduler designed for Valve's Steam Deck on its servers” “Group Policy has grown unwieldy over the decades. Policies can conflict in strange ways”
Comment from 12 Jan 2026 in “I dumped Windows 11 for Linux, and you should too” Insecure and registry-based underneath
“Group Policy (which isn't particularly secure for many reasons)”
Comment from 10 Apr 2026 in “France Launches Government Linux Desktop Plan as Windows Exit Begins” “it looks like the Registry with pretty labels”
Comment from 12 Nov 2025 in “Terminal Latency on Windows (2024)”
What people said
All 26 comments that mention it, newest first. Each links to the original comment.
“Managing apps via group policy is painful”
“GPO essentially standardizes a lot of tooling that SIPB et al built for Athena as well”
“Nothing come close to Active Directory + Group Policy, not even Entra ID + Intune.”
“Group Policy (which isn't particularly secure for many reasons)”
“As usual the lockin is not that they do something amazing that nothing else can do”
“Group policy is an annoying pain”
“very resistant to configuration as code”
“Group Policy and Active Directory are dead, for all intents and purposes.”
“Linux still doesn't have anywhere near as nice and cohesive as Group Policy, Active Directory etc.”
“Group Policy tends to be more stable than plain registry tweaks.”
“how much you can reclaim your own machine just by running through the local policies”
“modern MDMs & Group Policy (on the Windows side) make managing host firewalls easy enough”
“GPOs are unbelievably configurable and you'd need to know lots and lots of registry lore to get close.”
“I am a sysadmin and Group Policy is the entire moat Microsoft has. Linux has nothing like it”
“Group Policy's granular control over the endpoint”
“you still need Group Policy to configure the VMs according to the corporate standards”
“Group Policy has grown unwieldy over the decades. Policies can conflict in strange ways”
“Group Policy Edit is the way to restrict many things.”
“That's not a problem with group policy. You're just complaining that GPO is not omnipotent.”
“I’ve had far too many major incidents that were the result of unexpected interactions between group policy and production deployments.”
“I always found it straight forward. Never had an issue”
“developing/testing/debugging group policy issues is a miserable experience”
“Group/Local Policy especially, since it's effectively a zero coding required system.”
“we don't expose that in UI anymore so the new panel doesn't have it”
“it looks like the Registry with pretty labels”
“you should open the Group Policy Editor one time. Each property has some paragraphs for description.”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.