Exclude Member server from the Domain policy

Discussion in 'Active Directory' started by DD, Apr 26, 2007.

  1. DD

    DD Guest

    We defined the Domain security policy on the DC for the the users login but I
    want to exclude this domain security policy for the member server.

    I want the member server have his own local policy.

    How to achive this setting ?
     
    DD, Apr 26, 2007
    #1
    1. Advertisements

  2. Dear DD,
    You can move the Member Server to a special OU and "Block Inheritance", this
    means that the OU (which is a subset from the Domain) will not inherit GPOs
    from the parent container.
    I'm attaching an easy link on GPOs
    http://www.petri.co.il/working_with_group_policy.htm

    Best regards.
     
    Hayman Ezzeldin, Apr 26, 2007
    #2
    1. Advertisements

  3. DD

    Myweb Guest

    Hello DD,

    Block policy inheritance will NOT block the password policy from the domain,
    this will always apply.

    Best regards

    Myweb
    Disclaimer: This posting is provided "AS IS" with no warranties, and confers
    no rights.
     
    Myweb, Apr 26, 2007
    #3
  4. If you mean for password policy of domain users, you can't block it.
    Longhorn AD offers multiple password policies per domain. If it is some
    other security policy, then consider defining it in something other than
    the domain policy so you can appropriately link it to the proper OUs.

    --
    Joe Richards Microsoft MVP Windows Server Directory Services
    Author of O'Reilly Active Directory Third Edition
    www.joeware.net


    ---O'Reilly Active Directory Third Edition now available---

    http://www.joeware.net/win/ad3e.htm
     
    Joe Richards [MVP], Apr 29, 2007
    #4
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.