Re: Default Domain Controllers Policy scope

I wasn't sure if I had accidentally changed the setting or not. Right now,
the Default DC GPO is linked to the DC OU and the local forest. There are
settings in the Default DC GPO that are being applied to clients that I do
not want so if I remove the forest from the links that would unlink the
Default DC GPO from the clients right?

What is RSoP? Kind of new at this stuff.

"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
news:%23gMe6XDeGHA.764@xxxxxxxxxxxxxxxxxxxxxxx
In normal Windows AD the Default DC GPO is linked to the DC OU,
and in the DC OU there are only DCs. I would expect this is how SBS
also sets up this part of AD control. If so, the policy settings in the
Default DC OU would apply only to DCs.
What specific policies are you seeing applied to workstations from
this GPO, and, are you sure those are not set also elsewhere, in a
different GPO (perhaps linked to the domain object).
You may find using the RSoP capability with GPMC (download the
Group Policy Management Console) can help you diagnose this.


"David Anderson" <da@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:emm74PDeGHA.4932@xxxxxxxxxxxxxxxxxxxxxxx
We recently installed a Windows 2003 SBS server and I was wondering if by
default the Default Domain Controllers Policy should be changing settings
for the client computers or just the DC. It appears to be applying its
settings to the client computers. Is this the default behavior?

Thanks,
David



.

Relevant Pages

  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... Server Security and Auditing Policy ... This list only includes links in the domain of the GPO. ... The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... > Server Security and Auditing Policy ... > This list only includes links in the domain of the GPO. ... > The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: Local GPO refreshes outside of refresh interval
    ... I looked through my GPO's Windows Settings section ... > Some policies, including IE policies, have a checkbox that defines if this ... > it should apply EVEN if the value defined in GPO did not change since the ... we are talking about one particular policy: ...
    (microsoft.public.windows.group_policy)
  • Re: IE Maintenance Group Policy Settings Issue
    ... If you configure a GPO to set the proxy to blank, ... be identified as a change to the policy and it will be re-applied to the ... This would be a GPO change and the settings ...
    (microsoft.public.win2000.group_policy)
  • Re: Loopback processing, roaming profiles, folder redirection for domain-member laptops
    ... I suggest not mixing Computer Settings and User Settings in the same GPO - this restricts your flexibility and can be confusing ... if you put the laptops' user accounts into a seperate OU from the desktops, then you can use loopback processing to apply different User Configuration settings to the laptops and desktops if you also seperate out the settings you want to be different into seperate GPOs ... User Configuration, Network, Offline Files, "Do not automatically make redirected folders available offline" prevents that from happening BEFORE redirecting any folders - its not retro active. ...
    (microsoft.public.windows.group_policy)
Loading