Domain Security Policy vs Domain Controller Security

[computerMe]

Hello Guys, can anybody give me the defference between the two? Domain Security Policy and Domain Controller Security . Actually I already have a little idea how it work. Just wanna have a clear idea experienced people. Because if ever I will do a changes like the password policy and apply it right away.. it won't work.

When you click the apply button when making any changes how many minutes that the changes will take effect?

Any tips out there? THANKS...

 

[computerMe]

 

[nevets2001uk]

I may not be 100% correct but here goes...

The Domain Security Policy is where you can configure Domain-wide security options. In here for example you would configure you domain password policy and perhaps a standard login script that needs to be applied to everyone user in the domain.

The Domain Controller Security Policy would cover domain controller settings. You may configure additional scripts or tighter restricted software or IE settings etc to help secure your DC's. This policy is only applied to the Domain Controller Policy not the domain.

On Client Computers the default GPO refresh is 90 minutes so your changes may not immediately take effect. Also some only update during a login so may not take place until users restart their PC's. On DC's the refresh interval is 5 minutes.

You can force a GPO update on a computer using the GPUPDATE command at the command prompt.

Cheers,
Steve

Steve G (MCP)

 

[computerMe]

Hi NEVETS2001uk...

Thanks alot and more power to you..

Pls keep up your good work...