Re: starting over with GPO

You can only apply security policies at the domain level
i.e like password policy.

You cannot apply security policies at the OU level.

Regards
Samir Shah
shahsameerk@xxxxxxxxx
"UWRFREPORTER04" <UWRFREPORTER04@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F61ACD30-FB3D-4D57-BE5B-240BDC4453B5@xxxxxxxxxxxxxxxx
I decided to start over with figuring out my problems with GPO and accept
the
possibility the way I have my test lab set up is a reason not everything
is
being applied the way I want or how I think it should be. Ii'm running a
180
day trial of server 2003 on virtual pc, connected to a router-connected to
a
modem-back down to my laptop.

I decided to test it in a real environment I'm working on. The new DC is
not live and I'm the only one on the domain and I'll use myself as a test.

Here is what I want to do, want to make sure I have the right idea.

Create a default domain policy with the account policies (password,
account
lockout, etc), apply that to the entire domain.

Create an OU called Users OU and place all our users into that and create
a
new gpo and link that gpo to the Users OU.

For a few in the IT dept, I will create a separte OU called IT and only
link
the default domain policy so they don't get applied the same settings.

My question is when I'm linking gpos for the Users OU, what order does it
need to be linked. I read that the last OU is applied. I want the
default
domain policy account policies to take affect.

If I have
1: Users OU
2: Default Domain Policy.

What would be the result. I don't want the account policies to be ignored
because there is nothing set in the Users OU.

Please let me know if this sounds good or seems like it would work (in
theory) the way I have it designed in my head.


.

Relevant Pages

  • Re: password policy by organizational unit
    ... and created accounts and set thepolicyin the OU to 10 characters. ... If you need to define two different policies to ... users have the strict policy of minimum length and change every 40 ... I can't speak for the other products, but with Password Policy ...
    (microsoft.public.windows.group_policy)
  • Re: SBS 2008 - "Exchange E-Mail address policy cannot be configured"...
    ... I verified all of that and do not see any policies that would cause ... Check Exchange 2003 policies" part of the following SBS ... " The Exchange E-mail address policy cannot be configured. ... ONLY Mailbox Manager policies and do not define e-mail addresses ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2008 - "Exchange E-Mail address policy cannot be configured"...
    ... I verified all of that and do not see any policies that would cause ... This issue occurs due to mailbox management policies or ... Check Exchange 2003 policies" part of the following SBS ... " The Exchange E-mail address policy cannot be configured. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2008 - "Exchange E-Mail address policy cannot be configured"...
    ... I verified all of that and do not see any policies that would cause ... SMTP addresses in recipient policies. ... Check Exchange 2003 policies" part of the following SBS ... " The Exchange E-mail address policy cannot be configured. ...
    (microsoft.public.windows.server.sbs)
  • Re: Least User Priviledges for Network Administrators
    ... It makes sense to have a chain of command and approval policy to keep things ... the computer use policies, software purchasing policies, security ... upper management--both within the Network Technology group, ... driving the process of tightening down security. ...
    (microsoft.public.windowsxp.security_admin)
Loading