Re: Domain Security Policy vs Domain Controller Security Policy

From: Ben Smith [MS] (bensmi@microsoft.com)
Date: 08/08/02 

From: Ben Smith [MS] <bensmi@microsoft.com>
Date: Thu, 8 Aug 2002 10:46:51 -0700

In article <OYEyVzjPCHA.2320@tkmsftngp11>, brian sobolewski (colts18
@hotmail.com) writes...
> Im trying to distinguish between the two. Does Domain Controller Security
> Policy just effect the DCs and Domain Security Policy effect the whole
> domain which includes the DCs? Does one override the other? I am a bit
> confused.
>
> Thanks for any explanations
>
>
>

Hi Brian -

The GPOs linked to the Domain controllers OU affect the DC computer
itself.

The GPOs linked to the domain containt affect all computers in the
domain. The account policies setting at the domain container affects
domain accounts. 

-- 
Ben Smith
Microsoft Training and Certification
Are you secure? http://www.microsoft.com/security
This posting is provided “AS IS” with no warranties, and confers no 
rights.

Relevant Pages

  • Re: Domain
    ... Domain Controller Security Policy has all user rights assignments ... Configuring ipsec policy at the domain level ...
    (microsoft.public.win2000.group_policy)
  • Re: Domain Security Policy Versus Domain Controller Security Policy
    ... > Domain Security Policy Versus Domain Controller Security Policy. ... means it takes longer to process the settings. ...
    (microsoft.public.win2000.active_directory)
  • Re: Stand alone Win2003 Standard w/ AD... how to allow users to login?
    ... If there any entries in the deny logon ... > right in the Domain Controller Security Policy that the user is a member ... > domain controller after making the change in Domain Controller Security ...
    (microsoft.public.windows.server.security)
  • Re: Effective Setting Greyed Out and Cannot Invoke Settings in Log on locally
    ... it would not be configured in the Domain Controller Security Policy ... > If this is a domain controller it has to be configured in Domain Controller Security ... You can also use the gpresult support tool on a domain computer to see what ...
    (microsoft.public.win2000.security)
  • Re: Domain controller Security Policy
    ... The Domain Controller policy is linked to the Domain Controllers OU and the ... policy is only applied to the DCs in that OU. ... > Security Policy" and Domain Policy? ...
    (microsoft.public.windows.server.security)