Re: Desparetly seeking tech. info

From: pdk (anonymous_at_discussions.microsoft.com)
Date: 07/19/04 

Date: Mon, 19 Jul 2004 11:35:54 -0700

I am aware of the schemaextensions. But Microsoft
stipulates in their whitepaper "Troubleshooting Group
policy in Microsoft Server 2003" that if you restore a GPO
default setting changes such as those made by SMS or
Exchanges will be lost. So my question is what are these
changes.

>-----Original Message-----
>SMS 2003 does not change your domain security. The only
thing I could think
>of SMS 2003 doing during installation is to extend your
AD schema, but the
>person that installed SMS 2003 would have to selected
that option. Even
>then, the only side effect would be increased replication
traffic between
>your AD sites. We don't modify domain security.
>
>Mark Scott [MSFT]
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>
>"pdk" <anonymous@discussions.microsoft.com> wrote in
message
>news:2e99101c46d6a$c73f4570$a601280a@phx.gbl...
>>
>> I am troubleshooting some settings in The default domain
>> policycausing problems around the Enterprise.
>>
>> We have security settings that we can not explain and
>> suspects the upgrade of SMS2000 => SMS2003 to have
>> something to do with it.
>>
>> Does SMS alter the security settings in the default
domain
>> policy as it adds something but I can not locate
>> information on what SMS exactly does during
installation.
>>
>
>
>.
>

Relevant Pages

  • Windows2000 Domain Security Policy problem, changes revert back after 1 hour!?!
    ... I have quite a frustrating problem with the Default Domain Security ... Policy in my Active Directory domain. ... account lockout settings and I'd like to get rid of them. ... chars and password complexity + account lockout settings are disabled. ...
    (microsoft.public.win2000.security)
  • Re: Desperate seeking some tech. information
    ... policy in Microsoft Server 2003" that if you restore a GPO ... >SMS does not make any changes to domain group policy. ... >server you will be prompted before any rights are granted. ... >> I am troubleshooting some settings in The default domain ...
    (microsoft.public.sms.admin)
  • Re: Desperate seeking some tech. information
    ... extadsch.exe on the SMS CD should take care of that. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... > policy in Microsoft Server 2003" that if you restore a GPO ... >>> I am troubleshooting some settings in The default domain ...
    (microsoft.public.sms.admin)
  • Re: scripted logon
    ... Why can't you launch all the scripts from a Group Policy based Logon script. ... Here's the policy settings (I sure hope word wrap doesn't mess it up too ... Windows Components/Windows Installer ...
    (microsoft.public.windows.terminal_services)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... Server Security and Auditing Policy ... This list only includes links in the domain of the GPO. ... The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)