Managing Site, Domain, and Organizational Unit Policies

When you deploy Active Directory Domain Services, you can use Active Directory Group Policy. Each site, domain, and organizational unit can have one or more group policies. Group policies listed higher in the Group Policy list have a higher precedence than policies listed lower in the list. This ensures that policies are applied appropriately throughout the related sites, domains and organizational units.

Understanding Domain and Default Policies

When you want to work with Active Directory–based Group Policy, you’ll find that each domain in your organization has two default GPOs:

  • Default Domain Controllers Policy GPO. A default GPO created for and linked to the Domain Controllers organizational ...

Get Windows Server® 2008 Administrator's Pocket Consultant now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.