How-to, tips and tricks for working with today's technology. Covers Windows XP, Windows Server 2003, Exchange Server 2003, IIS 6.0 and SQL Server 2005.
Windows XP and Windows Server 2003 Tips
Create additional GPOs rather than editing the default GPOs
The Default Domain Policy and Default Domain Controller Policy GPOs provide the baseline policy for a domain. These policies are vital to the health of Active Directory in that domain. You should edit the Default Domain Policy only to set account policy. For other types of policy, you should create a new GPO and link it to the domain.
You should edit the Default Domain Controller Policy only to set users rights and audit policies. Otherwise, it is recommended that you do not make other changes to the Default Domain Controller Policy. If for some reason these policies become corrupted, Group Policy will not function properly.
Got an existing problem with Default GPOs fix them using dcgpofix.
William R. Stanek
The obligatory copyright statement:
©William R. Stanek 2004-2005. All Rights Reserved.