Default Domain policy does not work unless Enforced

[Guest]

Hello,

Why is it that my Default Domain Policy does not work unless it is Enforced
rather than Enabled. If it is Enabled, the GPO on my DC that takes place is
the local DC Group Policies. When I Enforce the Default Domain Policy, then
the Domain Policy overrides the Local DC policy. Why is that? I don't see the
need of Enforcing the policy when the Domain Policy overrides the Local
Policy. Doesn't it? Any help will do.

Jimmy K

 

[lforbes]

Hello,

Why is it that my Default Domain Policy does not work unless
it is Enforced
rather than Enabled. If it is Enabled, the GPO on my DC that
takes place is
the local DC Group Policies. When I Enforce the Default Domain
Policy, then
the Domain Policy overrides the Local DC policy. Why is that?
I don't see the
need of Enforcing the policy when the Domain Policy overrides
the Local
Policy. Doesn't it? Any help will do.

Jimmy K

Hi,

Default Domain Policy should Always Override Local computer Policy
settings without being "enforced". Although I don’t know what you
mean by "enforced". Do you mean you have ticked "no override"?. It
sounds like your DNS is not setup correctly as it looks like Group
Policy is not working properly. Do you have any event viewer messages
on your DC or clients? Check my site to make sure DNS is setup
correctly http://www.sd61.bc.ca/windows2000/dns.htm

Also, IF you have a Computer OU and there are settings in there, then
THEY will take Precident. Eg. Domain OU GPO setting "Do Not Show
Users last name"=enabled. Computer OU GPO setting "Do Not Show
Users last name"=Disabled. Winning Setting = Do Not Show Users last
name=Disabled (therefore users last name will show).

Cheers,

Lara