Default Domain Policy GPO

mog27

Im practicing user account stuff on my test Server 2003 system and I noticed I have both an icon (or MMC) for Default Domain Controller Security Settings AND Default Domain Security Settings. So I'm a little confused; are they the same thing? They both look similar.

royal

All your Domain Controllers are stored in a Domain Controllers organizational unit. The Default Domain Controller Policy is applied to this OU. The Default Domain Policy is applied at the root of your domain structure and applies to all objects in your domain. If you ever need to reset these GPOs, you can use the dcgpofix utility.