Right way Enforcing Group Policy with Default Policy

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I've recently added a new customised GPO in the Domain Controllers OU. I need
to enable some of my guys to shutdown the server and manage security logs.

When I put the new GPO in the top order, the default policy is rendered
useless, Administrators cannot do shutdown anymore. But if I move the
customised GPO below the default policy, it is not effective.

Somehow when I choose to have both policies as enforced, the tasks seems to
be able to perform by both the admins and my tech guys. Question is, if I
need to customise a new GPO for the default domain controller OU, do I really
need to do as mentioned prior or theres a better practice

Please suggest
 
When you add settings to the new GPO at the top of the list, it will
override defined settings in GPO's below it. Keep in mind that defined
settings in multiple GPO's do not "merge" - the top dogs settings apply. I
am not so sure you needed a new GPO as you simply may have been able to add
the groups you needed to have that user right to the current Domain
Controller Security Policy such as shut down system unless you did not want
to modify default Domain Controller Security Policy which is not a bad
strategy. Simply try adding administrators to the user rights in question to
your new GPO and it should work fine. --- Steve
 
Back
Top