Windows.Tips

Windows XP and Windows Server 2003 Tips

Create additional GPOs rather than editing the default GPOs

The Default Domain Policy and Default Domain Controller Policy GPOs provide the baseline policy for a domain. These policies are vital to the health of Active Directory in that domain. You should edit the Default Domain Policy only to set account policy. For other types of policy, you should create a new GPO and link it to the domain.

You should edit the Default Domain Controller Policy only to set users rights and audit policies. Otherwise, it is recommended that you do not make other changes to the Default Domain Controller Policy. If for some reason these policies become corrupted, Group Policy will not function properly.

Got an existing problem with Default GPOs fix them using dcgpofix.

Thanks for reading Windows.Tips. Hope you'll read Windows Server 2003 Inside Out -- It's got about 10,000 more tips.

William R. Stanek