Re: Default Domain policy does not work unless Enforced

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: lforbes (UseLinkToEmail_at_WindowsForumz.com)
Date: 01/16/05 

Date: 16 Jan 2005 00:45:59 -0500

"jimmyk" wrote:
> Hello,
>
> Why is it that my Default Domain Policy does not work unless
> it is Enforced
> rather than Enabled. If it is Enabled, the GPO on my DC that
> takes place is
> the local DC Group Policies. When I Enforce the Default Domain
> Policy, then
> the Domain Policy overrides the Local DC policy. Why is that?
> I don't see the
> need of Enforcing the policy when the Domain Policy overrides
> the Local
> Policy. Doesn't it? Any help will do.
>
> Jimmy K

Hi,

Default Domain Policy should Always Override Local computer Policy
settings without being "enforced". Although I don’t know what you
mean by "enforced". Do you mean you have ticked "no override"?. It
sounds like your DNS is not setup correctly as it looks like Group
Policy is not working properly. Do you have any event viewer messages
on your DC or clients? Check my site to make sure DNS is setup
correctly http://www.sd61.bc.ca/windows2000/dns.htm

Also, IF you have a Computer OU and there are settings in there, then
THEY will take Precident. Eg. Domain OU GPO setting "Do Not Show
Users last name"=enabled. Computer OU GPO setting "Do Not Show
Users last name"=Disabled. Winning Setting = Do Not Show Users last
name=Disabled (therefore users last name will show).

Cheers,

Lara 

-- 
Posted using the http://www.WindowsForumz.com/ interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.WindowsForumz.com/Group-Policy-Default-Domain-work-Enforced-ftopict250178.html
Visit Topic URL to contact author (reg. req'd).  Report abuse: http://www.WindowsForumz.com/eform.php?p=771670

Relevant Pages

  • Re: GROUP POLICY
    ... What exactly do you mean with "the policy file only appear in the primary DC"? ... domain policy are applied, that's by design. ... GPO: Default Domain Policy ... Computer Setting: 3 ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local DC Group Policy being applied for passwrds not the Defau
    ... Default Domain Policy being applied, but the password policies are not being ... Password Policies are being overridden by the local computer policy on the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Complex password in Domain GPO not applying anywhere.
    ... We have just found out that the Password must meet complexity ... requirements isn?t working on the domain policy. ... there is a failure in security. ...
    (microsoft.public.windows.server.active_directory)
  • RE: GPO settings are not applied
    ... Microsoft Windows XP Operating System Group Policy Result tool v2.0 ... GPO: Automatic_Updates ... GPO: Default Domain Policy ... Secure Proxy Server: N/A ...
    (microsoft.public.windows.server.active_directory)
  • RE: Companyweb and guests - advice?
    ... You can find the Default Domain policy under the following node: ... Open server management console, locate Advanced Management -> Group Policy ...
    (microsoft.public.windows.server.sbs)