Win2k3 Simple Policy Question

We are trying to define domain security policies and within the defaulted security policy MMC there are limited configuration options.  I know I am overlooking something simple, but where did all of the security/policy/user controls go?  They were concentrated within this MMC in Win2k Server but appear to have been changed.

Please point me in the right direction

Thank you
rfowleromaAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

cnewgaardCommented:
Go into Active Directory Users and Computers and right click on your domain name.  This will give you the default policy for your domain.  Another option is to download the group policy management tool from Microsoft.  It lays out all of your policies in one place.  Much easier to manage that way.  Just go to Microsoft or Google and search for group policy management console.  I think what you're looking at now is the default domain controllers policy or default domain security policy.
0
Chris DentPowerShell DeveloperCommented:

Just a warning...

Don't alter the Default Domain Controllers Policy unless you are absolutely sure of the changes you're making. That has to be one of the easiest ways to break the domain.
0
youre1mCommented:
The default domain policy applies to all OU's below, to control User / computer policies you should create additional GPO's at a lower level, these will give you more options than the default domain policy.

For instance create an OU called users below the domain level, and apply the GPO to that OU.
0
catoxpressCommented:
In AD if you create an OU and right click. Go to Properties. Click on Group Policy. Click Add, to add a Group Policy Object Link. Here you can edit the GPO for that OU.  There you should see ample security policy settings, especially under the USERS Configuration/Administrative Templates.  Add your users to this OU and Voila!  If you need to make any changes to Computer Policy remember to reboot the system.  I agree with Chris, making changes to the Default Domain Contollers Policy is not advisable unless you need a setting that is absolutely necessary.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.