Re: 70-217

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



In article <eYPrjxMUFHA.3188@xxxxxxxxxxxxxxxxxxxx>, "Preacher Man"
<nospam> says...
> I need some help on clarifying some topic issues for the test.
>
> 1. What are the differences in purpose for Admin Templates vs. Security
> Templates.

Apples and oranges. Admin templates are legacy items from the old days
of System Policies. In lay terms, they are policies for registry
changes.

Security templates are a collection of security settings that can be
processed and applied be the SCE in the OS.

> 2. I understand that the order of GPO processing is Local-Site-Domain-OU.
> But I think I have read where the Local Policy always take precedence over
> any GPO applied down the structure. Does the Local Policy always take
> effect no matter what kind of GPO applies at the Site-Domain-OU Level?

Not correct. Domain policy ALWAYS overrides local policy. In general,
the setting from the policy closest to the object will be applied.

>
> Thanks.
>
>
>
.



Relevant Pages

  • 70-217
    ... What are the differences in purpose for Admin Templates vs. Security ... I understand that the order of GPO processing is Local-Site-Domain-OU. ... But I think I have read where the Local Policy always take precedence over ...
    (microsoft.public.cert.exam.mcse)
  • Re: Local Security Policy on domain controller?
    ... A google search for "security configuration templates" turns up a fair ... Some settings require a reboot and others don't. ... >> It's so close to affecting the local policy that I probably shouldn't ... >> it will affect local security policy, ...
    (microsoft.public.win2000.security)
  • Re: HELP - Local policy database is corrupted
    ... I found that subfolders under security are gone. ... I copied these folders from other win2k pc, and I could opened the local ... HELP - Local policy database is corrupted ... > "Windows cannot open the local policy database. ...
    (microsoft.public.win2000.security)
  • Re: Information Wanted: Sec Conf Analysis Tool WITHOUT AD
    ... Some security settings won't take effect until after a reboot. ... The log files in %windir%\security are used for database ... only have local policy so the computer acts like a standalone server. ...
    (microsoft.public.win2000.security)
  • Re: Locking Down Terminal Server in Workgroup environment
    ... How can I lock down my standalone TS with a local policy without locking down the Administrator account? ... If your TS is not part of an Active Directory domain, you are limited to using the local policy on the server in stead of a domain GPO. ... One of the disadvantages is that you can't use security filtering on a local policy, as you can with AD-based Group Policies. ... Make gpeditor a member of the GP Editors group ...
    (microsoft.public.windows.terminal_services)