Re: Default Domain Controllers Policy

Hi Mark,

Thanks for confirming this. Can you suggest any reason why this policy is
being applied to all computers in our domain and possibly how I can go about
preventing this?


"Mark Heitbrink [MVP]" <spam-only@xxxxxxxxxxxxxxxxxxxxx> wrote in message
news:%231hqdLomGHA.4164@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

Steven Hutchinson schrieb:
It would seem that our Default Domain Controllers Policy is being applied
to
all computers in our domain.

No good idea.

As far as I know this should not be the case and should only be applied
to
Domain Controllers.

Absolutly right.

Can anyone confirm this to me as it is causing a few problems?

For sure. Because a domain controller is much more restrictiv configured
like "logon locally" and other permissions it is not recommended to
apply the DefDomConPol to the clients, becaus ea "user" needs to work
on a client.
If you want to allow a user logon on that client and you edit the
DefDomConPol, then he is able to logon locally on a DC aswell.
In most cases you don´t wnat that.

Mark
--
Mark Heitbrink - MVP Windows Server
Homepage: www.gruppenrichtlinien.de
extend GPO: www.desktopstandard.com
PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.


.

Relevant Pages

  • Re: Default Domain Controllers Policy
    ... Domain Controllers. ... If you want to allow a user logon on that client and you edit the ... DefDomConPol, then he is able to logon locally on a DC aswell. ...
    (microsoft.public.win2000.group_policy)
  • RE: id- 1030 source - Userenv
    ... Thanks for using the SBS newsgroup! ... I understand that the issue to be: all client ... computers got 1030 error and can not connect to the SBS 2003 server box. ... Click Internet Protocol, ...
    (microsoft.public.windows.server.sbs)
  • RE: Remote Web Workplace - Connect to client workstations
    ... In Connect to Client desktops item lists all client computers on your SBS ... network that are running Windows XP or above; In Connect to Server desktops ... On the Tools menu, click Internet Options. ...
    (microsoft.public.windows.server.sbs)
  • RE: Domain naming issue
    ... computers discover other computers on the network. ... so that the client computers resolve .local names correctly. ... you can configure a Macintosh computer ... One thing that will support desktop sharing with a Mac is Microsoft Office ...
    (microsoft.public.windows.server.sbs)
  • RE: Unable to connect to Server/Client desktop using RWW
    ... When you remotely connect to Server Desktops (Client Desktops) ... Please verify all computers have allowed users log ... We can download the Remote Desktop Web Connection from Microsoft web ...
    (microsoft.public.windows.server.sbs)