Find solution
What Is A Domain?

What is the difference between domain security policy and domain security controller policy?

  • I'm not so sure how this works in Windows operating system. As I understand, local security policies (Administrative Tools-> Local Security Policy) is what applied to stand-alone computers. Say there's a stand-alone computer named Computer-A. I connect Computer-A to an Active Directory which has a Domain Controller Named DOC. If I want to change Password Policy and Account Lockout Policy applied to Computer-A, I should go to Active Directoroy Users and Computers in DOC, right-click on the domain and open properties and edit Default Domain Policy. As I understand this is the default domain GPO and hence applied to all computers in the domain, in this case including Computer-A. Still, eventhough I can affect the Account Policies of Computer-A by editing Default Domain Policy, I can't change Local Policies of Computer-A such as "Amout of Idle time required before suspending session" by editing Default Domain Policy. To affect them (Audit Policy, User Rights Assignment, Security Options). I have to edit Domain Controller Security Policy to do that. To do this I have to mmc-> Add/Remove Snap-In -> Group Policy. Have I got this right so far? Now, say I haven't edited anything in the DC Policy or Domain Security Policy and just connect Computer-A to the AD. If I generate RSoP for a domain user account in Computer-A, will I get a combination of Account Policies set in Domain Security Policy and Local Policies set in DC Security Policy?

  • Answer:

    There is no difference between these policies.... Good luck!

Yahoo! Answers Visit the source

Was this solution helpful to you?

Other answers

There is no difference between these policies.... Good luck!

Released on April 24, 2003, Windows Server 2003 (which carries the version number 5.2) is the follow-up to Windows 2000 Server, incorporating compatibility and other features from Windows XP. Unlike Windows 2000 Server, Windows Server 2003's default installation has none of the server components enabled, to reduce the attack surface of new machines. Windows Server 2003 includes compatibility modes to allow older applications to run with greater stability. It was made more compatible with Windows NT 4.0 domain-based networking. Incorporating and upgrading a Windows NT 4.0 domain to Windows 2000 was considered difficult and time-consuming, and generally was considered an all-or-nothing upgrade, particularly when dealing with Active Directory. Windows Server 2003 brought in enhanced Active Directory compatibility, and better deployment support, to ease the transition from Windows NT 4.0 to Windows Server 2003 and Windows XP Professional. New and updated features as compared to Windows 2000: Internet Information Services (IIS) v6.0 - A significantly improved version of IIS. Increased default security over previous versions, due to the built-in firewall and having most services disabled by default. Significant improvements to Message Queuing. Manage Your Server - a role management administrative tool that allows an administrator to choose what functionality the server should provide. Improvements to Active Directory, such as the ability to deactivate classes from the schema, or to run multiple instances of the directory server (ADAM) Improvements to Group Policy handling and administration Improved disk management, including the ability to back up from shadows of files, allowing the backup of open files. Improved scripting and command line tools, which are part of Microsoft's initiative to bring a complete command shell to the next version of Windows. Support for a hardware-based "watchdog timer", which can restart the server if the operating system does not respond within a certain amount of time.

Christina

Related Q & A:

Just Added Q & A:

Find solution

For every problem there is a solution! Proved by Solucija.

  • Got an issue and looking for advice?

  • Ask Solucija to search every corner of the Web for help.

  • Get workable solutions and helpful tips in a moment.

Just ask Solucija about an issue you face and immediately get a list of ready solutions, answers and tips from other Internet users. We always provide the most suitable and complete answer to your question at the top, along with a few good alternatives below.