Re: Domain Security Policy

AD Users and Computers (dsa.msc) is a user interface to manage some
aspects of some AD objects. It has a way to get at the GPOs (group
policy objects). If you intstall (and you should if you are using XP or
W2k3 to run dsa.msc) the GPMC and then access to GPOs in dsa.msc
is changed, with the GPMC being the newer, better way.
see www.microsoft.com/gp
and along with all the other infro look for link to download GPMC
(Group Policy Management Console).

Now, briefly, your other question deal with the difference between
the two pre-defined GPOs, Default Domain and Default Domain
Controller GPOs. The first is applied to the entire domain, the second
is only linked to the Domain Controllers OU and hence only applies to
objects within that OU. As such, the DD GPO impacts all that is subject
to an applied policy defined within it, whereas the DDC GPO only applies
additional settings, beyond those of the DD GPO, to objects in the DC OU
(i.e. the DCs in a default domain setup).

There is much reading at the link provided above, and based on the
questions you have asked I would strongly encourage you to CHANGE
NOTHING in the GPOs until you have done some study.



"George Schneider" <georgedschneider@xxxxxxxxxxxxxx> wrote in message
news:86F31CDA-9F74-4225-B6C0-C5CF399E613C@xxxxxxxxxxxxxxxx
What is the difference betwen using the domain security policy, domian
controller security policy, or active directoy users and computers(Group
Policy)? I found different audit settings in domain controller security
policy than what was in active directory users & computers.


.

Relevant Pages

  • Re: At this point, Im wondering if GPOs even work?
    ... what is set in a policy does not bubble up into the user interface. ... Pop-up Blocker" box on one and checked it on the other. ... ensured no GPOs nor local policy were superseding my Test GPO ... Config (so why do these settings even exist in Computer Config if they ...
    (microsoft.public.windows.group_policy)
  • Re: Re: Applying GPO only to certain computers within an OU.....
    ... > GPOs via security and groups. ... > moved computers will still get those GPOs applied to them. ... >> which we don't want the policy to apply. ...
    (microsoft.public.win2000.group_policy)
  • Re: Authentication issue preventing Group Policy from applying to
    ... Linking a GPO to a container other than the one where the ... or the one for the Computer when the policy was for Users ... >>What are the permissions on the GPOs? ... > and the policy is set to apply to Authenticated Users. ...
    (microsoft.public.win2000.active_directory)
  • Re: Manage Vista via group policy on Server 2003 SP1
    ... The key is that in order to manage Vista policy, you need to be on a Vista system while you're editing GPOs. ... wanted to push out a GPO from the domain controller to manage BitLocker ...
    (microsoft.public.windows.group_policy)
  • Re: Unable to access \domainSYSVOL but able to access \serverSYSVO
    ... Long before you fix this issue, you'll need to fix the other issue. ... The permissions are correct on the GPOs. ... When I attempt to edit any GPO, including the Default Domain Policy, I get ... Configuration information could not be read from the domain controller, ...
    (microsoft.public.windows.server.active_directory)