RE: Domain vs. Local security policy
From: Streeter, Joseph (WI) (Joseph.Streeter_at_wi.ngb.army.mil)
Date: 09/09/03
- Previous message: dacruz_at_star-1.com: "RE: windows 2000 security logs"
- Maybe in reply to: Brad Renfro: "Domain vs. Local security policy"
- Next in thread: Arik Fletcher: "RE: Domain vs. Local security policy"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: "'focus-ms@securityfocus.com'" <focus-ms@securityfocus.com> Date: Tue, 9 Sep 2003 13:36:57 -0500
It might be best to have the local GPO good and tight. That way there are
fewer polices that have to be applied across the network at start up and
logon. It's also the only policy to apply to local accounts on that machine.
If you want to back off any of the local policies you can override them with
the Domain or OU polcy.
-----Original Message-----
From: simonis [mailto:simonis@myself.com]
Sent: Monday, September 08, 2003 1:26 PM
To: Brad Renfro
Cc: focus-ms@securityfocus.com
Subject: Re: Domain vs. Local security policy
Brad Renfro wrote:
>
> What is the residual risk of applying fairly strict domain wide security
> policies on a LAN but leaving local security policy pretty much the
default?
>
As far as I understand it, this would allow someone to remove the box
from the domain and operate under the looser local policy. A larger
question is of what benefit it is to you?
-Ds
---------------------------------------------------------------------------
KaVaDo provides the first and only integrated Web application scanner and
firewall security suite that prevent Web applications attacks, the most
common form of online exploitation. Download a FREE whitepaper on Security
Policy Automation for Web Applications.
http://www.securityfocus.com/sponsor/KaVaDo_focus-ms_030818
---------------------------------------------------------------------------
---------------------------------------------------------------------------
KaVaDo provides the first and only integrated Web application scanner and
firewall security suite that prevent Web applications attacks, the most
common form of online exploitation. Download a FREE whitepaper on Security Policy Automation for Web Applications.
http://www.securityfocus.com/sponsor/KaVaDo_focus-ms_030818
---------------------------------------------------------------------------
- Previous message: dacruz_at_star-1.com: "RE: windows 2000 security logs"
- Maybe in reply to: Brad Renfro: "Domain vs. Local security policy"
- Next in thread: Arik Fletcher: "RE: Domain vs. Local security policy"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
