Brian Candler wrote:
That makes a lot of sense. But enforcing that policy might be difficult. This is important if you're relying on your gold server for disaster recovery purposes - if the target machines had some change made which nobody remembers and weren't reflected in the gold server, then any freshly-built machines will be non-functional.
Alternatively, you could have the Gold machine periodically refresh the production machines' configuration, ensuring they match Gold. Anyone who ignores procedures probably deserves to spend time banging his head trying to figure out why his changes won't "stick", and that mistake will only be made once.
