Domain Controller Security Policy not overriding the Local Security Policy

[MTNL]

We are having 4 Domain Controllers in out network.The
Domain controller security Policy set is not reflecting in
the local security policy of that server.This Domain
controller security Policy is permeating to the other
Domain Controller but it not getting reflected in local
security policy of that server also.

Please help me out to fix this problem.We are using
windows 2000 servers only in the network.
Even if we use the secedit command also the policies are
not forced to the local policy.

 

[Keith W. McCammon]

If one policy takes precedence over another, the lesser policy is not
overwritten, but is simply not enforced. Am I understanding correctly that
you want the DCSP settings to be reflected in the LSP?

 

[Cary Shultz [A.D. MVP]]

To clarify, the pecking order for GPOs is local, Sites, Domain, OU.....

So, if there is a setting in the local policy that differs from that of
either a Site, Domain or OU setting, the latter wins.

HTH,

Cary

 

[MTNL]

In the LSP the effective setting should be the policies
set in the DCSP but here DCSP is not getting applied.
So instead of taking the DSCP the system is taking the LSP.

ie if we add a new policy in DCSP it is not coming as the
effective policy in the LSP.
for example if we are adding a user XYZ and giving him log
on locally permission that user is not getting reflected
in the LSP and he is not able to log on locally.
Please help me to fix this problem.
Thanks
MTNL