Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Overriding Default Domain Policy for special cases

Posted on 2008-10-30
2
Medium Priority
?
792 Views
Last Modified: 2013-12-04
In a Windows 2003 AD Environment, I'd like to understand relationship between default domain Policy, and User Account Settings. The perfect example would be : I establish a Default Domain Policy restricting logons for office hours, but on specific cases Maybe I'd need to override this policy for a certain user. What if I go to his account properties and give him afterhours logon permission ? would it override Default Domain Policy ?
0
Comment
Question by:jsonnenvzla2
2 Comments
 
LVL 30

Expert Comment

by:LauraEHunterMVP
ID: 22847010
Logon hours are defined on a per-user basis, not via GPO. The only GPO setting that relates to logon hours is "forcibly disconnect users when logon hours expire".

Password and account lockout policy are set at the domain level and cannot be overridden. All other GPO settings in the Default Domain Policy adhere to normal Group Policy processing rules, as described here: http://technet.microsoft.com/en-us/library/cc785665.aspx
0
 
LVL 32

Accepted Solution

by:
rsivanandan earned 500 total points
ID: 22904258
Or if you want to (in future) something not to apply to a group of users, create a separate container and move the users there. Have a separate domain policy for that group and all other can have the default domain policy.

Cheers,
Rajesh

0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Sometimes it necessary to set special permissions on user objects.  For instance when using a Blackberry server, the SendAs permission needs to be set. I see many admins struggle with the setting that permission only to see it disappear within a few…
Conducting a customer service survey used to be as straightforward as sending a template email out using checkboxes and numerical rating systems to measure satisfaction.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

580 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question