I disagree. Group policies are extremely straightforward to administer in my experience.
That depends on how fine grained your targeting rules are. They can get insane.