what's the difference between group policy objects and domain
controller
security policy.
both are GPOs.
The Domain Controller Security Policy is a shortcut to the security
settings in the GPO called Default Domain Controllers Policy and
Domain Security Policy is a shortcut to the security settings in the
GPO called Default Domain Policy
DEFAULT DC POL
C:WINDOWSsystem32dcpol.msc
/gpobject:"LDAP://CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policie
s,CN=System,DC=DOMAIN,DC=COM"
DEFAULT DOMAIN POL
C:WINDOWSsystem32dompol.msc
/gpobject:"LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policie
s,CN=System,DC=DOMAIN,DC=COM"