Re: How are group policy's security settings and AD object's security settings related?


"san" <sangwoo.im@xxxxxxxxx> wrote in message
news:1181836294.105632.290510@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
How are the security settings of group policy object and AD object
related?

Depends on what you mean by GPO security.

GPOs *are* AD objects and in that sense the permissions are precisely
the same in terms of setting them as any other AD object -- there vary
only in what the permissions means, similar to the way that permissions
vary for container objects (OUs and NTFS directories) vs. leaf objects
(e.g., users, computers, and NTFS files). There are just different meanings
for each permission (possibly.)

INSIDE of a GPO you can use it to SET the NTFS, Registry, or Service
permissions for each of those items on the affected machines when the GPO
is applied.

So far, from what I read, it seems that AD object's ACLs
affect only in the context of AD while group policy object's security
settings affect the actual computer device, service, and users. Am I
on the right track?

Sounds like you are referring to the GPO "settings" intended to apply
to the computer when the GPO is applied (as opposed to controlling
who can do what to the GPO itself in AD.)

Also, it seems that group policy object's security
settings doesn't utilize ACL mechanism, instead they use registries
and other means. Is it possible to have a conflict between the two
security settings?

I don't think so but it is still unclear precisely what you are asking.


--
Herb Martin, MCSE, MVP
http://www.LearnQuick.Com
(phone on web site)


.

Relevant Pages

  • Re: Problem with NT4 domain trusting W2003 domain
    ... | implemented the settings you suggested in the "default domain controller ... | GPO" and not in the local GPO, and verified with GPMC that they are ... |> suspect there are some settings in security options caused this problem, ...
    (microsoft.public.windows.server.migration)
  • Re: Windows Firewall Wont Stay On
    ... I have come up with a solution that does not disable Security Center, ... By changing the Permissions of that key, ... settings from being changed again. ... the firewall alert settings in Security Center get ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: get rid of security center?
    ... I have come up with a solution that does not disable Security Center, ... By changing the Permissions of that key, ... settings from being changed again. ... the firewall alert settings in Security Center get ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Removing the Internet Security in SP2
    ... I have come up with a solution that does not disable Security Center, ... By changing the Permissions of that key, ... settings from being changed again. ... the firewall alert settings in Security Center get ...
    (microsoft.public.windowsxp.security_admin)
  • Re: [2nd attempt] keep getting Windows firewall message
    ... alerts, or rather a way to keep the user settings for alerts from ... I have come up with a solution that does not disable Security Center, ... By changing the Permissions of that key, ...
    (microsoft.public.windowsxp.general)
Loading