I'm in the process of moving to a new ePO server so I'm taking this opportunity to clean up my policies. I know that there is a list of exclusion articles here that deal with some server roles, but I was wondering the best way to do this. If I have AD synced and my Servers are in an OU together. In theory I could do some one-off policies and break inheritance, but it seems like it would be best if possible to just make a general "Server" policy that would apply to all of them (or am I being naive?). We do not at all use our servers for any browsing, so at least getting a virus that was is not as high of a danger. My main concern is trying to protect the servers while not going crazy on how many different policies I have.