Default Domain Policy

[Kevin Gibson]

What effect is there if I delete the current default domain policy and build
a new policy at the top level? I have noticed that my default policy appears
to have been over written from a W2K machine and the 2003 attributes are
missing.

 

[Cary Shultz]

-----Original Message-----
What effect is there if I delete the current default domain policy and build
a new policy at the top level? I have noticed that my default policy appears
to have been over written from a W2K machine and the 2003 attributes are
missing.

--
Kevin


.

Kevin,

There is nothing wrong with doing this if you truly know
what you are doing. Generally, simply creating another
GPO and applying it at the same level as the "Default
Domain Policy" - but making it higher on the list so that
it is applied after the "DDP" is and, thus, WINS should
there be any settings that conflict - is a better choice.
Once you are sure that you have everything covered you
could - if you so choose - disable the DDP and then, after
a few days/weeks, remove it.

HTH,

Cary