Using Default Policies

With Windows 2000 or later, you create a domain by establishing the first domain controller for that domain. This typically means logging on to a stand-alone server as a local administrator, running the Domain Controller Installation Wizard (DCPROMO), and then specifying that you want to establish a new forest or domain. When you establish the domain and the domain controller, two GPOs are created by default:

  • Default Domain Policy GPO. A GPO created for and linked to the domain within Active Directory. This GPO is used to establish baselines for a selection of policy settings that apply to all users and computers in a domain.

  • Default Domain Controllers Policy GPO. A GPO created for and linked to the Domain Controllers OU that ...

Get Windows® Group Policy Administrators Pocket Consultant now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.