+ Reply to Thread
Results 1 to 2 of 2

Thread: LGPOs and Domain Controllers

  1. #1
    pfdsotm is offline Getting Started on GPanswers.com
    Join Date
    Apr 2010
    Posts
    1

    Default LGPOs and Domain Controllers

    Hi, I am new to this form and I hope I have come to the right place for my question.
    I have a fairly good understanding of policies and our domain is setup where we use only Group policies to apply permissions.
    This is policy and practice.
    Lately we have been asked by our internal auditing Department to provide them with all the policies that are applied to our Domain controllers. After doing so we were told that we did not include the LGPOs.
    Maybe I am mistaken, but it is my understanding that LGPOs do not apply to DCs. Even though you can bring up the local editor, the settings in them do not apply. That only the Default Domain Controller policy applies.
    Am I correct in this thinking and if so is there a Doc from Microsoft that I can provide them so they accept the GPOs. If I am not correct, can someone still provide a doc that describes, In Clear English” what policies can be set with the LGPO.
    I do need some doc or direct confirmation from Microsoft on this topic, not a consensus.
    Thanks in advance.

  2. #2
    jeremym's Avatar
    jeremym is offline 30+ Helpful Posts 50+ Helpful Posts
    Join Date
    Dec 1969
    Posts
    58

    Default No MLGPOs, byt LGPOs !

    So, there are NOT MLGPOs, but there -ARE-, rather -is- one LGPO which can be applied to a DC.

    You can test this out for yourself.. no "special documentation needed."

    Try on Win7:
    -Open new MMC console.
    -Add in snap-in Group Policy Object editor
    -Click BROWSE and see Computer and Users
    -(Users is the MLGPO part)

    Now... on WS08 / WS08R2 when as a DC :
    -Open new MMC console.
    -Add in snap-in Group Policy Object editor
    -Click BROWSE and see Computer only.. not users.

    So.. no MLGPOs on DCs !

+ Reply to Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts

Search Engine Friendly URLs by vBSEO