We help IT Professionals succeed at work.

Domain group policy and domain controller policy

Mawallace asked
Medium Priority
Last Modified: 2010-04-13
Hi have a problem in that the permissions on our Windows 2000 server syslog folder keep changing.

I think it may be down to a group poilcy issue -
We have to make adjusmtnes to one of the Windows NT file folder on our workstations, I was advised to do this be the software support department to do this by channging the permsissions via Domain Group Policy, which works well on the workstations.

Does this mean that the domain controller will also be "forced" to use the domain "group policy"?

Do I have to do anything to the domain controller group poicly to ensure the changes do not apply to the domain controller?
Watch Question

Top Expert 2006
Hi Mawallace,

local policy applies first (for a DC its the default domain controller policy)  
then the default domain policy (will affect ALL users and computers)
then finally its the OU level GP which only affects the OU members and will take precedence.


Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.