GPO's are good but I find that if you have a tree structure OU, and you set basic GPO settings at top level, and so on until you reach the OU that the users is in, it takes a while for the user to logon.

I have found that keep the number of GPO that a users reads down to a minimum, evan if it means replicating data within the GPO across different OU's.