Re: How to configure Group Policy
From: x y (jamescagney90210@excite.com)
Date: 06/16/02
- Next message: x y: "Re: controling ports"
- Previous message: JC Morales: "Re: Public Computer Security"
- In reply to: tc: "How to configure Group Policy"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "x y" <jamescagney90210@excite.com> Date: Sat, 15 Jun 2002 18:45:42 -0400
"tc" <tcruise@ev1.net> wrote in message
news:e85201c213ba$9944c160$9be62ecf@tkmsftngxa03...
> I am trying to implement a group policy for my domain. I
> am confused about the different policies.. (ie Domain
> Controller Security Policy, Domain Security Policy, Local
> Computer Policy). When I do a start-run-gpedit.msc, is
> that one of the 3 policies listed above? If so, which
> one?
Domain security policy is the one you probably want, affects all machines in
your domain. Be careful. If there are certain machines that should not get
this policy, you can go into the Active Directory users and computers MMC,
and edit the properties of the OU containing the policy to deny that
computer from having Read or Apply permission on that group policy.
Domain controller policy is the other policy included by default in a new AD
setup. It affects domain controllers. I believe it takes precedence over
the domain security policy whenever the two have conflicting settings.
Local computer policy affects only that local computer, and is overridden by
any and every domain policy. group policies are applied in this order:
local policy, site policy [if you have multiple sites], domain policy, and
last the policy / policies in the OU that the computer or user is in
[default OUs include "Users," "Computers" and "Domain Controllers" among
others].
> Should I be using the Security Analysis and Configuration
> tool along with the security Templates to configure group
> policy for my domain?
these can be useful tools, but I find myself using these MMCs more for local
machine policies and using the Group Policy MMC instead for domain policies.
the first time you add the group policy snap-in, it asks you whether you
want this MMC to manage the local policy, the domain policy, the domain
controller policy, or a policy that you've defined on any other OU.
- Next message: x y: "Re: controling ports"
- Previous message: JC Morales: "Re: Public Computer Security"
- In reply to: tc: "How to configure Group Policy"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
