Domain controller security

Devilsbane

So if you go to start->administrative tools->Domain Controller Security policy, it opens up an MMC that looks like your standard group policy, except that it only shows the Security Settings.

What is the difference between this console, and the GPO that is linked to the Domain Controllers OU. I had expected that they would be the same thing, so I changed a setting on the MMC and it did not change the same setting in the GPO. So I assume that if one has something configured, and the other doesn't, then it will enforce it. But what happens when the MMC snapin has password history enforced to 24 passwords remembered, and the GPO has 4 passwords remembered?

Devilsbane

I even waited a couple hours, thinking maybe it just took time to update. But no changes were made.