Group Policy

[Joe Eer]

Hi All

I wish to know where to have good website for study the
Group Policy configuration.

Besides, I am confuse whether the Security and Analysis is
it part of Group Policy? Usually, shall we use the Default
Group Policy or create a new GP? Which one is advise?

Many thanks

Joe

 

[Steven L Umbach]

Security policy is considered part of Group Policy under machine configuration. It
makes sense to create a new Group Policy where you are going to make changes to
security policy since it will be easier to go back to default settings if needed.
Just make sure that the new GPO is above the default GPO in the list as policy is
applied from the bottom up with defined values in the top policy taking precedence.
Keep in mind that password/account policy for domain members can only be configured
at the domain level. See links below that may be of help. The Windows 2000 Security
Hardening Guide is a good read for security policy recommendations from
Microsoft. --- Steve

http://www.labmice.net/activedirectory/grpolicy.htm
http://www.microsoft.com/windows2000/techinfo/howitworks/management/grouppolwp.asp
http://support.microsoft.com/default.aspx?scid=kb;en-us;322176
http://www.infosec.uga.edu/windows.html