Recommended Group Policy for Mixed W2K W2K3 Domain Controllers

When you have domain controllers that are both Windows 2000 and Windows 2003
in the same domain, what is the recommended best practice for how to apply
group policy for Default Domain Controller Security Policy? Should we put
the W2K3 DCs into a separate OU under Domain Controllers, and then attach a
security policy to that OU that is specific to Windows 2003?

Some settings just cannot be shared between the two operating systems. For
example, some security policies for Windows 2003 need to authorize Network
Service and Local Service users, which exist only in Windows 2003.

--
Will


.

Relevant Pages

  • Re: Restrict Anonymous Key
    ... It probably is configured in the security policy for the domain controllers and ... Go to Domain Controllers Security Policy/security ... equivalent to the registry setting of 1. ... We have Windows XP and Windows ...
    (microsoft.public.win2000.security)
  • Re: Domain Local group and Require strong. GPO Problem
    ... Microsoft MVP (Windows Server System: ... >> controller that is not capable of encrypting secure channel traffic with ... >> that all such domain controllers must be running Windows 2000 or later ... >> Session keys used to establish secure channel communications between ...
    (microsoft.public.win2000.security)
  • Re: Group Policy broke my DCs
    ... to be very careful with tweaking services on domain controllers. ... Group Policy - security policy at the OU level which makes it much easier to ... complied from the Windows 2003 Server Security guide for baseline core ... Server - automatic ...
    (microsoft.public.windows.group_policy)
  • Re: Group Policy broke my DCs
    ... > need to be very careful with tweaking services on domain controllers. ... > Group Policy - security policy at the OU level which makes it much easier ... > is complied from the Windows 2003 Server Security guide for baseline core ...
    (microsoft.public.windows.group_policy)
  • Re: new domain setup
    ... (Primary Domain Controllers and Backup Domain Controllers). ... In Windows NT you had PDC and only on PDC were you able to create new users. ... How To View and Transfer FSMO Roles in Windows Server 2003 ...
    (microsoft.public.windows.server.setup)