RE: Group Policies

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Chris Ard [MSFT] (ChrisArd_at_online.microsoft.com)
Date: 04/30/04 

Date: Fri, 30 Apr 2004 03:36:37 GMT

The difference between the 2 policies is in the name of them. One applies
to only Domain Controller, the other applies to the whole Domain.

The idea behind a domain controller is that this is a centralized
administration point that contains a lot of critical idea. It is
definitely a best practice to NOT allow anyone other than administrators to
log directly onto the server. This presents a major security risk for most
businesses. That is why we lock it down by default and you have to
manually go and override that policy to allow them to log on. You should
only have to make the change to allow log on locally in the Default Domain
Controllers Policy.

Chris Ard
Small Business Server
Enterprise Platforms Support

This posting is provided "AS IS" with no warranties, and confers no rights.

Newsgroups:
SBS 4.x : microsoft.public.backoffice.smallbiz
SBS 2000: microsoft.public.backoffice.smallbiz2000
SBS 2003: microsoft.public.windows.server.sbs

Relevant Pages

  • Re: Migrating from SBS 2000
    ... Cris Hanna [SBS - MVP] ... Windows Small Business Server 2008 Unleashed ... > A Microsoft Registered Partner ... > 2008 into the domain and allow it to become a peer Domain controller. ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Migrating from SBS 2000
    ... Cris Hanna [SBS - MVP] ... Windows Small Business Server 2008 Unleashed ... > 2008 into the domain and allow it to become a peer Domain controller. ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: SBS 2003 Lost all the Security Policies.
    ... i didn't use dcgpofix i used another sbs 2003 premium has example and created the policies manually. ... I know that your Default Domain Controller Security Policy or Domain Security Policy it is empty. ... DCGPOFIX.EXE will restore the Default Domain Policy and the Default Domain Controller Policy to original default settings. ...
    (microsoft.public.windows.server.sbs)
  • Re: Migrating from SBS 2000
    ... I'd like to give up Exchange mostly because I don't like the ... Windows Small Business Server 2008 Unleashed ... SBS and just use Server 2008, ... 2008 into the domain and allow it to become a peer Domain controller. ...
    (microsoft.public.backoffice.smallbiz2000)
  • RE: the dns service cannot open active directory
    ... SBS 2003 machine as an additional domain controller of a Windows 2000 ... The new SBS 2003 computer must be a global catalog server and must be the ... On a Windows 2000 domain, you must prepare Active Directory before you ...
    (microsoft.public.windows.server.sbs)