When deploying a new GPO, ensure correct access settings: - Set Domain Admins as owner - Apply explicit access configuration - Invoke method to make access rights consistent between AD and File System