Re: GPO Problem

From: Tibor Biro (tiborbiro@rogers.com)
Date: 08/26/02 

From: "Tibor Biro" <tiborbiro@rogers.com>
Date: Mon, 26 Aug 2002 09:49:48 -0400

Policies are applied in this order:
Local
Site
Domain
Organizational Unit

By default each level overrides the previous level.

If you have the same policy defined locally and at the domain level the
domain setting will overwrite the local setting.

Regards,
Tibor Biro

"Mandy" <mmmandy@hotmail.com> wrote in message
news:#GWYDfMTCHA.1468@tkmsftngp11...
> I am a bit confuse about the security policy under the windows 2000 domain
> controller server.
>
> There are currently three security policies defined for the domain
> controller server
> 1. local security policy
> 2. domain security policy
> 3. domain controller security policy
>
> Just wonder the order of each policy being applied in domain controller.
As
> I know domain controller administrator will logo as local and domain
> administrator.
>
> If i have one policy defined locally and the same policy with different
> value defined for the domain, then which policy will be applied in the
> domain controller server?
>
>
>
>

Relevant Pages

  • Domain Controller Security Policy errors
    ... Security Policy or the Domain Controller Security Policy. ... The DC is also a print and file server. ... The domain controller for Group Policy operations is not available. ...
    (microsoft.public.win2000.active_directory)
  • Re: Simple question on Group Policy, Password policy and blocking inheritance
    ... My point was that you can use fine-grained password policies to specify multiple password policies and apply different password restrictions and account lockout policies to different sets of users within a single domain, ... > trying to enforce a password policy for the entire company. ... create a policy and make sure that is linked at domain level. ... > restoring their 'Default Domain Policy' and 'Default Domain Controller ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password policy, no override
    ... DCs will ignore any password policies you set at the domain controller ... I would disagree with setting the password policy on the Default ... > account and not the Domain user account object). ...
    (microsoft.public.win2000.active_directory)
  • Re: SBS 2003 Lost all the Security Policies.
    ... i didn't use dcgpofix i used another sbs 2003 premium has example and created the policies manually. ... I know that your Default Domain Controller Security Policy or Domain Security Policy it is empty. ... DCGPOFIX.EXE will restore the Default Domain Policy and the Default Domain Controller Policy to original default settings. ...
    (microsoft.public.windows.server.sbs)
  • Re: logon from the server machine !
    ... >The default Domain Controller policy in Windows Server ... >Security Policy setting. ... Allow Local Logon ...
    (microsoft.public.windows.server.general)