none
default domain policy

    Question

  • default domain policy will be applied to all OU's by default? or it needs to linked to each OU's
    Thursday, March 19, 2015 2:28 PM

Answers

  • Default domain policy will apply to all OU's as default.

    As a best practice, you should configure the Default Domain Policy GPO only to manage the default Account Policies settings, Password Policy, Account Lockout Policy, and Kerberos Policy. for other settings, create new policy.

    Password Policy and Account Lockout Policy can be applied only at the domain level (usually at the Default domain policy) and cant be blocked.


    Please take a moment to Vote as Helpful and/or Mark as Answer where applicable. Thanks.

    Thursday, March 19, 2015 8:36 PM
  • default domain policy will be applied to all OU's by default? or it needs to linked to each OU's
    Yes to all. Let 'Default Domain Policy' be for password policy and account policies. If you REALLY want to apply specific GPO to the whole domain, create New policy and link it to the domain, but do not append it to the default domain policy unless you are good in documenting them.

    Mahdi Tehrani   |     |   www.mahditehrani.ir
    Please click on Propose As Answer or to mark this post as and helpful for other people.
    This posting is provided AS-IS with no warranties, and confers no rights.

    Friday, March 20, 2015 4:59 AM

All replies

  • Default domain policy will apply to all OU's as default.

    As a best practice, you should configure the Default Domain Policy GPO only to manage the default Account Policies settings, Password Policy, Account Lockout Policy, and Kerberos Policy. for other settings, create new policy.

    Password Policy and Account Lockout Policy can be applied only at the domain level (usually at the Default domain policy) and cant be blocked.


    Please take a moment to Vote as Helpful and/or Mark as Answer where applicable. Thanks.

    Thursday, March 19, 2015 8:36 PM
  • default domain policy will be applied to all OU's by default? or it needs to linked to each OU's
    Yes to all. Let 'Default Domain Policy' be for password policy and account policies. If you REALLY want to apply specific GPO to the whole domain, create New policy and link it to the domain, but do not append it to the default domain policy unless you are good in documenting them.

    Mahdi Tehrani   |     |   www.mahditehrani.ir
    Please click on Propose As Answer or to mark this post as and helpful for other people.
    This posting is provided AS-IS with no warranties, and confers no rights.

    Friday, March 20, 2015 4:59 AM