Domain security policy vs Default domain policy (GPO)

[dissolved]

Ok, the Domain Security Policy and the Default Domain Policy GPO has me confused.

I've read conflicting things about where password policy should be applied. I have ALWAYS defined my password policy and Account lockout policies via the Domain Security Policy snap in. I never even use the Default Domain Policy GPO.

Is this normal practice?
Which takes precedence? The DOMAIN SECURITY? policy or the DEFAULT DOMAIN SECURITY policy?

Thanks

 

[mrmoneymatters]

They are the same thing. The domain security policy is just a shortcut to the default domain security policy. Also, account settings for your password policy always have to be set at the domain level.

 

[dissolved]

thanks