What's in the default domain and default DC GPO's

[Dan]

Anyone have the list of what's in these two GPO's by
default? Or have a site where it's posted for both?
Thanks,
Dan

 

[Mark Renoden [MSFT]]

Hi Dan

I haven't seen one. Why do you ask?

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Dan]

Hey Mark,
I just started at a new place and they've been
making "updates" to the default lists and I want to know
what they've changed. If you see something please let me
know. I don't want to restore the settings because I'm
sure what they've done is necessary but I'd like to get
things done the right way with a new GPO.
Thanks,
Dan

-----Original Message-----
Hi Dan

I haven't seen one. Why do you ask?

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

Anyone have the list of what's in these two GPO's by
default? Or have a site where it's posted for both?
Thanks,
Dan

.

 

[Mark Renoden [MSFT]]

Hi Dan

Best I can suggest is to create a mock domain and use GPMC to pull a report
of the default settings and then compare this with what you've got at the
moment.

http://www.microsoft.com/windowsserver2003/gpmc/default.mspx

HTH
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

Hey Mark,
I just started at a new place and they've been
making "updates" to the default lists and I want to know
what they've changed. If you see something please let me
know. I don't want to restore the settings because I'm
sure what they've done is necessary but I'd like to get
things done the right way with a new GPO.
Thanks,
Dan

-----Original Message-----
Hi Dan

I haven't seen one. Why do you ask?

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

Anyone have the list of what's in these two GPO's by
default? Or have a site where it's posted for both?
Thanks,
Dan

.

 

[Cary Shultz [A.D. MVP]]

Mark,

That is exactly what I was going to suggest. Not sure of any other way.
Kinda tedious, though.

I might also add that it is typically not a good idea to change the default
Domain Policy or the default Domain Controller Policy. I usually suggest
creating a separate GPO to make sure that it has the desired effect and then
possibly, after some time - and maybe several individual GPOs - combine
those related GPOs into one. But, it is still a separate GPO from the
default Domain Policy. The one exception to that rule would be the Password
policy - which should be done at the default Domain Security Policy anyway!

HTH,

Cary

Hi Dan

Best I can suggest is to create a mock domain and use GPMC to pull a report
of the default settings and then compare this with what you've got at the
moment.

http://www.microsoft.com/windowsserver2003/gpmc/default.mspx

HTH
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

Hey Mark,
I just started at a new place and they've been
making "updates" to the default lists and I want to know
what they've changed. If you see something please let me
know. I don't want to restore the settings because I'm
sure what they've done is necessary but I'd like to get
things done the right way with a new GPO.
Thanks,
Dan

-----Original Message-----
Hi Dan

I haven't seen one. Why do you ask?

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

Anyone have the list of what's in these two GPO's by
default? Or have a site where it's posted for both?
Thanks,
Dan


.