Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.
Local Policy set on DC
Name: SuperPlay Date: November 25, 2003 at 15:11:46 Pacific OS: 2k3 Server CPU/Ram: Lots
Comment:
I have a server that has been promoted to a DC.
It appears that there are many setting set on the servers "Local Policy" this is causing me headaches, as I want to control the policy settings via a policy set on at the OU level and not via the server’s local policy. (The local policy overrides the OU policy)
Each time I want to set a setting i.e. Password Complexity/auditing at an OU level, I first have to edit the local policy and disable the setting(s) there first.
Is there a way to clear all settings on the local policy?
Name: Glen Date: November 26, 2003 at 05:30:54 Pacific
Reply:
First of all, local policies to not override OU Policies. The local policies are applied first, then site, domain and OU policies. You must be missing something in your policy set up.
You should have to do this, but you could apply the default template using the Security Configuration and Analysis tool. I'd wait on that option but cause as I said, the local policy does not override the OU policy as you say.
0
Response Number 2
Name: maniacchen Date: December 13, 2003 at 11:12:52 Pacific
Reply:
I am with glen, OU policy applies last and has the highest priority. pwd policy can only be configured at domain level. in other GP, you can configure it, but domain pwd gp will always prevail. that's the MS way.
Summary: I am a bit confused over local policy ;-) There are Local policy settings in each group policy say the default domain policy and you can also add a MMC snap in for group policy for the local computer...
Summary: Hi, I have a Win 2003 Domain controller & a XP client. I have set "deny logon locally" policy setting in client machine. I think this changed has arised a problem. After that change I cannot log on to...
Summary: I want to do on W2003 R2 what I had been doing on my W2K server. I am running terminal services, and I wanted to set various options in the local policy computer and user sections. BUT -- in the pol...