Re: Default Domain Controller GPO Question
From: Darren Mar-Elia (dmanonymous_at_discussions.microsoft.com)
Date: 07/01/04
- Next message: Steven Umbach: "Re: Default Domain Controller GPO Question"
- Previous message: adfreak: "Domain Controller .inf question"
- In reply to: adfreak: "Default Domain Controller GPO Question"
- Next in thread: adfreak: "Re: Default Domain Controller GPO Question"
- Reply: adfreak: "Re: Default Domain Controller GPO Question"
- Messages sorted by: [ date ] [ thread ]
Date: Thu, 1 Jul 2004 12:46:58 -0700
The best solution would be to sort out what you really need in the existing
DC policy, rather than hoping that the new one doesn't screw up something.
But, to answer your question, the best way would be to link a new GPO to the
DC OU and import your security template. In terms of conflicting settings,
it depends upon which order the GPOs are linked--the higher GPO in the list
will process last and thus any policy set by the GPO lower in the list will
be overwritten by a conflicting setting on the GPO higher in the list. Hope
that helps.
-- Darren Mar-Elia MS-MVP-Windows Management http://www.gpoguy.com "adfreak" <rtivnan@comcast.net> wrote in message news:uui29J6XEHA.2408@tk2msftngp13.phx.gbl... > Here is my situation. The "Default Domain Controller Policy" for my > production AD has been modified numerous times (just the user rights > section). We are going to be moving to native mode from mixed mode shortly. > We would like to link a newly created DC Security policy.inf file via a GPO > to the Domain Controllers Container. > > For now, we want to keep the existing settins for the default DC GPO > (because we're not sure what will happen if we delete it because previous > admins added numerous users/groups to certain user rights policies). How > should we go about linking the newly created .inf? Do we simply "add" a GPO > and precede it before the Default DC one? What happens when some of the > user rights management settings conflict between the two as I know they > will? Which one will take affect? or will both? > > Is it bad to have two of them? > > Please advise > >
- Next message: Steven Umbach: "Re: Default Domain Controller GPO Question"
- Previous message: adfreak: "Domain Controller .inf question"
- In reply to: adfreak: "Default Domain Controller GPO Question"
- Next in thread: adfreak: "Re: Default Domain Controller GPO Question"
- Reply: adfreak: "Re: Default Domain Controller GPO Question"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
