Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Overriding Default Domain Policy for special cases

Posted on 2008-10-30
2
774 Views
Last Modified: 2013-12-04
In a Windows 2003 AD Environment, I'd like to understand relationship between default domain Policy, and User Account Settings. The perfect example would be : I establish a Default Domain Policy restricting logons for office hours, but on specific cases Maybe I'd need to override this policy for a certain user. What if I go to his account properties and give him afterhours logon permission ? would it override Default Domain Policy ?
0
Comment
Question by:jsonnenvzla2
2 Comments
 
LVL 30

Expert Comment

by:LauraEHunterMVP
ID: 22847010
Logon hours are defined on a per-user basis, not via GPO. The only GPO setting that relates to logon hours is "forcibly disconnect users when logon hours expire".

Password and account lockout policy are set at the domain level and cannot be overridden. All other GPO settings in the Default Domain Policy adhere to normal Group Policy processing rules, as described here: http://technet.microsoft.com/en-us/library/cc785665.aspx
0
 
LVL 32

Accepted Solution

by:
rsivanandan earned 125 total points
ID: 22904258
Or if you want to (in future) something not to apply to a group of users, create a separate container and move the users there. Have a separate domain policy for that group and all other can have the default domain policy.

Cheers,
Rajesh

0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
Developer portfolios can be a bit of an enigma—how do you present yourself to employers without burying them in lines of code?  A modern portfolio is more than just work samples, it’s also a statement of how you work.
This video will demonstrate how to find the puppet warp tool from the edit menu and where to put the points to edit.
XMind Plus helps organize all details/aspects of any project from large to small in an orderly and concise manner. If you are working on a complex project, use this micro tutorial to show you how to make a basic flow chart. The software is free when…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question