(I should preface this by saying I recently shifted jobs and have come from a much smaller company with a mostly linux environment to a larger company with a very standard windows server environment, and I'm still catching up a bit when it comes to Active Directory and Group Policy)
What is the best way to create a separate GPO for Win7 machines and Win10 machines? Basically, we are trying to manage the 'slider at the bottom' UAC setting but as we've discovered that's quite different on Win7 and Win10. From what I can tell there isn't a 'native' way to detect OS in Goup Policy. We already have our Computers organized by department in Active Directory. I'm not sure if I can create a second organization unit and have the computer object for PCxxx exist in two places.
The best idea I've come up with seems extremely cumbersome, and that is to delegate the two Policies manually and break the down per computer. This seems really cumbersome in Group Policy Management itself though, is there a better way to do this, or a better way to solve my overall issue?