Click here to get back home

Windows 2003 Domain Security
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Windows 2003 Domain Security Clayton Sutton 07-14-2005
Posted by Clayton Sutton on July 14, 2005, 11:06 am
Please log in for more thread options
 We just moved to Windows 2003 from an NT 4.0 domain. Under NT 4.0 there was
a "Domain Security Policy" node under "Administrative Tools". Now there is
only "Local Security Policy". What happned to "Domain Security Policy"
under Windows 2003? How do you now configure Domain Security Policies?

Thanks for any help.


Clayton




Posted by Clayton Sutton on July 14, 2005, 11:19 am
Please log in for more thread options
 I found it! It's now part of a GPO: "Default Domain Policy".


Clayton



> We just moved to Windows 2003 from an NT 4.0 domain. Under NT 4.0 there
> was a "Domain Security Policy" node under "Administrative Tools". Now
> there is only "Local Security Policy". What happned to "Domain Security
> Policy" under Windows 2003? How do you now configure Domain Security
> Policies?
>
> Thanks for any help.
>
>
> Clayton
>




Posted by Roger Abell on July 14, 2005, 6:16 pm
Please log in for more thread options
You are best off not modifying the
Default Domain Policy
or the
Default Domain Controller Policy
You can define more GPOs and link them to the
domain, the Domain Controllers OU, or any other OU
(or sites if of use to you)
Group Policy is very powerful, and also has some
shortcomings. Walk softly while learning it.
I would suggest always using a new GPO linked to
an OU where you test new settings before making those
policy settings in a more broadly applied GPO.
Visit
www.microsoft.com/gp
and the newsgroup for GP is
microsoft.public.windows.group_policy

--
Roger Abell
Microsoft MVP (Windows Security)
MCSE (W2k3,W2k,Nt4) MCDBA
> I found it! It's now part of a GPO: "Default Domain Policy".
>
>
> Clayton
>
>
>
> > We just moved to Windows 2003 from an NT 4.0 domain. Under NT 4.0 there
> > was a "Domain Security Policy" node under "Administrative Tools". Now
> > there is only "Local Security Policy". What happned to "Domain Security
> > Policy" under Windows 2003? How do you now configure Domain Security
> > Policies?
> >
> > Thanks for any help.
> >
> >
> > Clayton
> >
>
>




Posted by Clayton Sutton on July 15, 2005, 9:04 am
Please log in for more thread options
Thank you for your input Roger. I will take it to hart!


Clayton



> You are best off not modifying the
> Default Domain Policy
> or the
> Default Domain Controller Policy
> You can define more GPOs and link them to the
> domain, the Domain Controllers OU, or any other OU
> (or sites if of use to you)
> Group Policy is very powerful, and also has some
> shortcomings. Walk softly while learning it.
> I would suggest always using a new GPO linked to
> an OU where you test new settings before making those
> policy settings in a more broadly applied GPO.
> Visit
> www.microsoft.com/gp
> and the newsgroup for GP is
> microsoft.public.windows.group_policy
>
> --
> Roger Abell
> Microsoft MVP (Windows Security)
> MCSE (W2k3,W2k,Nt4) MCDBA
>> I found it! It's now part of a GPO: "Default Domain Policy".
>>
>>
>> Clayton
>>
>>
>>
>> > We just moved to Windows 2003 from an NT 4.0 domain. Under NT 4.0
>> > there
>> > was a "Domain Security Policy" node under "Administrative Tools". Now
>> > there is only "Local Security Policy". What happned to "Domain
>> > Security
>> > Policy" under Windows 2003? How do you now configure Domain Security
>> > Policies?
>> >
>> > Thanks for any help.
>> >
>> >
>> > Clayton
>> >
>>
>>
>
>




Posted by Elf on July 29, 2005, 6:01 am
Please log in for more thread options
Patty Calcaterra:Florida Red

The name of the album?

Answers: Yes to all




Similar ThreadsPosted
What has Windows 2003 Server security done to domain user profiles January 17, 2006, 11:49 pm
Windows 2003, Domain Controllers & "Manage auditing and security November 1, 2006, 4:43 pm
Windows 2003 - Child domain cannot request certificate from root domain January 11, 2008, 11:41 am
Windows 2000 Domain, Windows 2003 Enterprise CA July 15, 2005, 2:07 pm
Role-based security from Windows Server 2003 Security Guide gives problems November 6, 2006, 8:00 am
How To Get Username and Domain Name in Windows 2003? June 10, 2005, 5:03 pm
Windows 2003 domain password policy September 26, 2006, 9:53 pm
Demote first DC in a Windows 2003 domain. What happens to the certs? March 3, 2008, 10:43 pm
Is it possible to remove an Enterprise CA from a Windows 2003 R2 domain? July 20, 2008, 1:08 am
Windows 2003 Domain Controller (Open Port 593) December 18, 2006, 4:48 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap