Default Domain Security Settings and DC Security Settings

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: frankcvc (frankcvc_at_discussions.microsoft.com)
Date: 11/07/04 

Date: Sun, 7 Nov 2004 13:19:03 -0800

On any AD domain controller, I see two Default Security Settings:
Default Domain Security Settings and Default Domain Controller Security
Settings.

I assume the default domain security settings would apply to all members of
the domain, member servers, DCs, and member client machines. The Default DC
security settings is just like the Local Security Settings on other machines.

Looked at their structures, pretty much the same except that different
options are set up in each of them. I wonder if these two settings set up
different security options, say, Account Password and lockout, what would
that mean? The DC's would only affect the AD Domain users and the Domain's
would only affect other users created on member servers and client machines?

Appreciate it if anyone could provide some insight on this matter. 

-- 
Frank

Relevant Pages

  • Re: Default Domain Security Settings and DC Security Settings
    ... The Default Domain Controller Policy applies to the Domain Controllers ... > Default Domain Security Settings and Default Domain Controller Security ... > the domain, member servers, DCs, and member client machines. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Default Domain Security Settings and DC Security Settings
    ... different settings than other servers and client in the domain. ... Could any of the default security settings be blocked or over-written at the ... >> the domain, member servers, DCs, and member client machines. ...
    (microsoft.public.windows.server.active_directory)
  • Domain Controller Policy problem in details
    ... Now whenever I go into "Domain Controller Security ... Policy" the only thing I have access to in "Security Settings" is Public Key ... the "Local Polices" which contains User Rights Assignment nor does it shows ... (Server1 or Server2) ...
    (microsoft.public.windows.server.general)
  • Help with Domain Controller Security Policy
    ... Now whenever I go into "Domain Controller Security ... Policy" the only thing I have access to in "Security Settings" is Public Key ... the "Local Polices" which contains User Rights Assignment nor does it shows ... (Server1 or Server2) ...
    (microsoft.public.windows.server.setup)
  • Domain Controller Policy problem in details
    ... Now whenever I go into "Domain Controller Security ... Policy" the only thing I have access to in "Security Settings" is Public Key ... the "Local Polices" which contains User Rights Assignment nor does it shows ... (Server1 or Server2) ...
    (microsoft.public.win2000.dns)