Your organization is currently running Active Directory on Server 2008 (single forest/two-domains) and want to get ahead of the curve and upgrade your entire forest to 2016. You have 10 domain controllers in the organization and all 10 act as global catalog servers spread evenly between five physical sites (2 per site). Each site has an office with approximately 3,000 users and about 5,000 devices. Additionally, managing these devices using group policy objects would be ideal. This way, the organization doesn't have to manage different policies on different server environments. Additionally, you need to refine your backup strategy for the newly upgraded Forest/Domain. Lastly, the sales and human resources departments have complained about their password complexities and request a more simplified password but more frequent changes.

What methods would you deploy to manage this using GPOs?