Re: Domain GPO v DC

From: Buggin (Totally_Bug_OuT_at_hotmail.com)
Date: 07/09/04 

Date: Fri, 9 Jul 2004 17:27:35 -0400

>>By default the Domain Controller Security Policy applies only to computers
>>in the domain controller container which should be only domain
>>controllers<<

which means that this policy should and only affect DC in the DC container.

what he is trying to say is checked the OU's properties and see what policy
is linked to them.

"Peter" <anonymous@discussions.microsoft.com> wrote in message
news:2a49b01c4659c$e05532c0$a301280a@phx.gbl...
> Thanks for your reply.
>
> Sorry, I didn't quite get it. I am a little bit thick !
>
> Could you please re-explain ?
>
> Peter.
>
>>-----Original Message-----
>>By default the Domain Controller Security Policy applies
> only to computers in
>>the domain controller container which should be only
> domain controllers. Either
>>you have your computers in the domain controllers
> container or you have the
>>default domain controller GPO linked to the domain
> container which you can check
>>in AD Users and Computers. Select the domain
> container/properties/Group Policy
>>to view what GPO's are linked to the domain. You can
> also use the gpresult free
>>support tool to view what Group Policy's are applied to
> a computer and the
>>logged on user. --- Steve
>>
>>
>>"Peter" <anonymous@discussions.microsoft.com> wrote in
> message
>>news:2a0f901c4654d$feb26d90$a301280a@phx.gbl...
>>> Hello
>>>
>>> Anyone knows why GPOs which are defined in the domain
>>> security strategy do not apply ? on all my machines in
>>> the domain it's the domain controller security strategy
>>> which apply to all my machines in the domain.
>>>
>>> TIA
>>>
>>>
>>
>>
>>.
>>

Relevant Pages

  • Re: Domain Password Security
    ... accounts need to use complex passwords and minimum of ntlmv2 should be used for lan ... Services Client and configuring authentication level on Domain Controller Security ... controllers if you have all W2K/XP computers. ... I also recommend you enable auditing of account logon and logon ...
    (microsoft.public.win2000.security)
  • Re: Domain Password Security
    ... Domain Controller Security ... >controllers if you have all W2K/XP computers. ... >administrator accounts only when needed to, ... account logon and logon ...
    (microsoft.public.win2000.security)
  • Re: Custom rights
    ... I don't know the specific answer to that offhand as I don't have Exchange ... >> By default any user can log onto a server other than domain controller. ... >> To add computers to the domain go to AD Users and Computers. ... >> not work on privileged groups such as administrators. ...
    (microsoft.public.win2000.security)
  • Re: The name could not be resolved
    ... On a domain controller, ... question, and check Exchange General to see what server they're on, and you ... >> Its possible that the Global Catalog server that Outlook is hitting to ... Connect via Active Directory Users and Computers and connect ...
    (microsoft.public.exchange.admin)
  • Re: Custom rights
    ... By default any user can log onto a server other than domain controller. ... allow then to logon to a domain controller give them the logon locally user ... To add computers to the domain go to AD Users and Computers. ... > Look into AD delegation, though you may need to do some custom delegation. ...
    (microsoft.public.win2000.security)