Default Domain Policy

  • Thread starter Thread starter Ben Blackmore
  • Start date Start date
B

Ben Blackmore

Hi,

At the top of our active directory is our domain, which has a group policy,
"Default Domain Policy". However no one can edit or remove this policy, not
even administrator working from the server its self (rather than an mmc snap
in from another pc).

Is this behaviour by default, or has admin lost access rights to that
policy?

Cheers

Ben
 
Do you have more than one DC? If so are you logging on
to the root DC (with the GC in it) or are you logging on
to a BDC? If you are then you need to log on to the root
DC and grant that admin enterprise admin rights
 
Only have 1 DC, (BDC is being setup and installed next week) we're using the
active directory users & computers consol directly on that screen, logged on
as administrator, which has domain admin, domain controller, domain user,
enterprise admin, and group policy creator rights. DOmain controller is the
primary group.
Cheers
Ben
 
Back
Top