Re: Domain GPO v DC

From: Steven Umbach (n9rou_at_n0spam-comcast.net)
Date: 07/09/04 

Date: Fri, 09 Jul 2004 00:57:38 GMT

By default the Domain Controller Security Policy applies only to computers in
the domain controller container which should be only domain controllers. Either
you have your computers in the domain controllers container or you have the
default domain controller GPO linked to the domain container which you can check
in AD Users and Computers. Select the domain container/properties/Group Policy
to view what GPO's are linked to the domain. You can also use the gpresult free
support tool to view what Group Policy's are applied to a computer and the
logged on user. --- Steve

"Peter" <anonymous@discussions.microsoft.com> wrote in message
news:2a0f901c4654d$feb26d90$a301280a@phx.gbl...
> Hello
>
> Anyone knows why GPOs which are defined in the domain
> security strategy do not apply ? on all my machines in
> the domain it's the domain controller security strategy
> which apply to all my machines in the domain.
>
> TIA
>
>

Relevant Pages

  • Re: Computer Management Security Problem
    ... I have check all other built-in and other groups and most users simply belong to the "Domain User" group with no specific or extra privileges. ... > accounts on the domain controller or are a member of a privileged group on the domain ... Note that XP Pro computers can have stored credentials. ... Enable auditing of account management in your Domain Controller Security ...
    (microsoft.public.win2000.security)
  • Re: Domain Password Security
    ... accounts need to use complex passwords and minimum of ntlmv2 should be used for lan ... Services Client and configuring authentication level on Domain Controller Security ... controllers if you have all W2K/XP computers. ... I also recommend you enable auditing of account logon and logon ...
    (microsoft.public.win2000.security)
  • Re: Domain Password Security
    ... Domain Controller Security ... >controllers if you have all W2K/XP computers. ... >administrator accounts only when needed to, ... account logon and logon ...
    (microsoft.public.win2000.security)
  • Re: Custom rights
    ... I don't know the specific answer to that offhand as I don't have Exchange ... >> By default any user can log onto a server other than domain controller. ... >> To add computers to the domain go to AD Users and Computers. ... >> not work on privileged groups such as administrators. ...
    (microsoft.public.win2000.security)
  • Re: The name could not be resolved
    ... On a domain controller, ... question, and check Exchange General to see what server they're on, and you ... >> Its possible that the Global Catalog server that Outlook is hitting to ... Connect via Active Directory Users and Computers and connect ...
    (microsoft.public.exchange.admin)