• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 217
  • Last Modified:

Domain group policy and domain controller policy

Hi have a problem in that the permissions on our Windows 2000 server syslog folder keep changing.

I think it may be down to a group poilcy issue -
We have to make adjusmtnes to one of the Windows NT file folder on our workstations, I was advised to do this be the software support department to do this by channging the permsissions via Domain Group Policy, which works well on the workstations.

Does this mean that the domain controller will also be "forced" to use the domain "group policy"?

Do I have to do anything to the domain controller group poicly to ensure the changes do not apply to the domain controller?
1 Solution
Hi Mawallace,

local policy applies first (for a DC its the default domain controller policy)  
then the default domain policy (will affect ALL users and computers)
then finally its the OU level GP which only affects the OU members and will take precedence.


Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

Tackle projects and never again get stuck behind a technical roadblock.
Join Now