windows-itpro-docs/windows/security/operating-system-security/network-security/windows-firewall/planning-group-policy-deployment-for-your-isolation-zones.md

title, description, ms.prod, ms.topic, ms.date

title	description	ms.prod	ms.topic	ms.date
Planning Group Policy Deployment for Your Isolation Zones	Learn how to plan a group policy deployment for your isolation zones after you determine the best logical design for your isolation environment.	windows-client	conceptual	09/08/2021

Planning Group Policy Deployment for Your Isolation Zones

After you've decided on the best logical design of your isolation environment for the network and device security requirements, you can start the implementation plan.

You have a list of isolation zones with the security requirements of each. For implementation, you must plan the groups that will hold the device accounts in each zone, the network access groups that will be used to determine who can access an isolated server, and the GPOs with the connection security and firewall rules to apply to corresponding groups. Finally you must determine how you'll ensure that the policies will only apply to the correct devices within each group.

• Planning Isolation Groups for the Zones

• Planning Network Access Groups

• Planning the GPOs

• Planning GPO Deployment