Domain security policy vs Domain controller security policy 1

[olisemalis]

Hi,

In the administrative tools on a win2003 dc machine, what is the difference between "Domain security policy" and "Domain controller security policy"? Desnt´both edit the default GPO for the server?

Thank you

 

[FloDiggs]

The default domain policy applies to the entire domain. The default domain controller policy by default only applies to the domain controllers OU.

 

[olisemalis]

So,

Because my server is a dc, both will apply to it, right?

Thank you

 

[FloDiggs]

If your DC is in the correct OU, yes.

 

[pogi05]

Also,

You should note that it is not best practice to edit those GPO's. It is recomended to create a policy of higher precedence to change the settings you want on the Domain Policy, etc. That way, you can always roll back to default by deleting the GPO's you created, rather than changing the settings manually.

Thanks,

Chris

 

[olisemalis]

Pogi05,

Is there any easy way to copy the default policy to a new one, in order to create a group policy of higer precedence as you told?

Thank you