GPOs

[Shingooooo]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

what's the difference between group policy objects and domain controller
security policy.

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Group Policy Objcts are used on your Domain clients, they are controlled
from the Domain Controller. Domain Controller Policy is your local Server
Policy changing settings here will only apply to the Server. You will also
have a Local Security Policy that applies only to that local client
machines. Hope this helps

Regards
Paul du Toit


"Shingooooo" <Shingooooo@discussions.microsoft.com> wrote in message
news:53005776-7664-4B70-A71A-6849762098A3@microsoft.com...
> what's the difference between group policy objects and domain controller
> security policy.
>

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Console of group policy consist of several extensions (Administrative
templates, Logon/Logoff Scripts, etc). Security Configuration is one of this
extension.

Domain Controller Security policy snap-in is just group policy object editor
mapped to Domain Controllers default policy security extension.




"Shingooooo" <Shingooooo@discussions.microsoft.com> wrote in message
news:53005776-7664-4B70-A71A-6849762098A3@microsoft.com...
> what's the difference between group policy objects and domain controller
> security policy.
>

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

"" wrote:
> what's the difference between group policy objects and domain
> controller
> security policy.

both are GPOs.

The Domain Controller Security Policy is a shortcut to the security
settings in the GPO called Default Domain Controllers Policy and
Domain Security Policy is a shortcut to the security settings in the
GPO called Default Domain Policy

DEFAULT DC POL
C:WINDOWSsystem32dcpol.msc
/gpobject:"LDAP://CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policie
s,CN=System,DC=DOMAIN,DC=COM"

DEFAULT DOMAIN POL
C:WINDOWSsystem32dompol.msc
/gpobject:"LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policie
s,CN=System,DC=DOMAIN,DC=COM"

--
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Active-Directory-GPOs-ftopict396979.html
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1312923