Windows 2012 R2 default domain controllers policy set to enforced

-

hi guys,

so i've migrated domain windows 2003 r2 on windows 2012 r2 , far running ok. had few problems relating orphaned dc's have cleared now. however, i'm trying grips using group policy. when migrated, old policy settings seemed have come across , things seem still locked down ok, in relation ous. run network @ our local college have student container applies lock-down policy. these gpos setup else.

i setup test network @ home before did said migration , comparing group policy settings, namely default ones, , have noticed default domain controllers policy has been set enforced on newly migrated domain. @ home on test server see not enforced default , wondering why is? have been reading can't find tells me should enforced wary disable setting. students return on monday don't want mess @ stage.

one thing did find odd when first opened gpo's, prompted message stated policies in sysvol folder not consistent ones in ad followed recommendation update.

any advise guys have on appreciated.

david

> i've migrated domain windows 2003 r2 on windows 2012 r2
> , far running ok.
 
this not touch gpos, gpos not "migrated" or
something - still before.
 
> enforced on newly migrated domain. @ home on test server see it
> not enforced default , wondering why is?
 
"a sever misunderstanding of how group policy inheritance , link order
works" closest reason see this. ddcp linked
"domain controllers", , long not create subordinate ous
there (which i've never seen) , block inheritance on them, there's no
reason enforce.
 
to add experience field: when see enforced gpos, in
cases enforcement not required. people use because
they not understand "link order".
 
> 1 thing did find odd when first opened gpo's, was
> prompted message stated policies in sysvol
> folder not consistent ones in ad followed its
> recommendation update.
 
that's ok , nothing hassle about.
 
martin

mal ein gutes buch über gpos lesen?

no not evil, if know doing: or bad gpos?
, if bothers me - coke bottle design refreshment :))


Windows Server  >  Group Policy



Comments

Post a Comment

Popular posts from this blog

Motherboard replacement

-
running windows 10 technical preview, need replace motherboard can run the  sysprep  command restoring pc ? or there easier  or more preferred way ? thanks if replace motherboard within same family of chipsets (i.e. intel > intel or amd > amd), should okay restarting pc twice. carey frisch Windows 10 Insider Preview  >  Windows 10 Insider Preview General
Read more

Cannot create Full Text Search catalog after upgrading to V12 - Database is not fully started up or it is not in an ONLINE state

-
in order access new full text search capiblities of sql azure, upgraded our azure sql v12. (a day later), when try create new catalog: create fulltext catalog mycatalog default i following message: msg 9972, level 16, state 100, line 1 database not started or not in online state. try full-text ddl command again after database started , becomes online. hi scott, apologies inconvenience caused you. known issue on service side , fix going included in next update. specific case mitigated, should able use full-text search syntax now. thanks, mihaela Microsoft Azure  >  Azure SQL Database
Read more

Remote Desktop App - Error 0x207 or 0x607

-
hi all, i manage windows 2012 r2 network, including connection broker, session hosts , remote apps virtual servers.  i've used remote desktop app on own android phone, no issues @ - connects published gateway url , can login , access network. we looking move business onto nokia handsets ms operating system (currently on blackberry), not able connect via remote desktop app on nokia lumia handset. setup, per android config , brings remote apps , remote desktop screen, know can connect.  when select remote desktop, shows following process: initiating remote connection securing remote connection certificate can't verified - choose connect it digitally signed cert (digicert sha2), pc name different physical connection broker name (inherited domain name old gov project - can't publish publicly) initiating establishing securing connection error have been 0x207 getting 0x607 a bit baffled, work on android (and ipad @ home using app). assume ms use d...
Read more