QUESTION POSED ON: 15 September 2005
I am VERY inexperienced with Active Directory, but am in a position where I need to evaluate certain areas of security and policies in a new implementation. I am having a hard time understanding how the GPOs are used, how they are pushed down to various sub domains (if they are pushed down at all), and how GPOs affect member servers.
Let me give you some background so this makes sense. There is the root domain, 6 sub domains (A, B, C, D, E, F) and 4 sub domains (1, 2, 3, 4) under domain C.
I was told that domains A-F each have their own GPO, and that domains 1-4 use the GPO in domain C. I was also told that the root domain has a default GPO. How do GPOs work when there are different policies at different levels? Does one get priority? Is there a setting I can check to see which gets applied?
Also, how do member servers in domains 1-4 work? Do they get the same password and audit settings as dictated in domain C or can they be setup differently?
Again, any help on this (or extra advice you want to just throw in) is GREATLY appreciated.
|
