Re: DEfault Domain Policy and Domain Controllers Policy.

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hello Super,

The Password policy settings configure in a policy on the domain level, otherwise it has no effect. So if you use the domain policy and not a self created at that level, change it like the settings you need. Password policy on another OU will only apply on machines that have NO contact to a domain.

The difference is the domain policy has effect on everything in your domain because it is the highest level. The Default domain controllers policy has only effect on your domain controllers not on any other machine.

Best regards

Myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.

I have found out that all my policies(password, lockout ) that
supposed to be define in the domain level is define in domain
controllers policy..

Is there a way to move it??

What is the main differencence between these two? DEfault Domain
Policy and Domain Controllers Policy.

Thank you



.

Relevant Pages

  • Re: Domain
    ... Domain Controller Security Policy has all user rights assignments ... Configuring ipsec policy at the domain level ...
    (microsoft.public.win2000.group_policy)
  • Re: Security hierarchy
    ... policy level also. ... >>can be configured only at domain level. ... Try running security configuration and ... >>try not to change domain and domain controller policy, ...
    (microsoft.public.win2000.security)
  • Re: Login Scripts
    ... Default Domain Policy) that contains the "baseline" settings that users ... at the OU level will override settings declared at the domain level, and GPO ... > domain if no MSI package is found. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account Lockout Threshold change - Not taking effect
    ... The other policy is linked at the domain level. ... I even changed the settings to 5 attempt. ... Have you tried unlinking the additional GPO you've created at the Domain ...
    (microsoft.public.windows.server.active_directory)
  • Re: Security hierarchy
    ... OK - last night I managed to reset the password policy. ... I had to boot into DS restore mode in order to be able to access the ... New users had to have complex passwords. ... >> I have tried all the suggestions plus a new top GPO at domain level ...
    (microsoft.public.win2000.security)