What is the Default Domain Controller to be used for?

It's recommended not to use the Default Domain GPO but what is the Default Domain Controller to be used for and would the same recommendation apply? I am thinking of applying Restricted Groups to some of the more sensitive groups in our domain and was wondering the best practice for this.

    Requires Free Membership to View

The issue is not to alter the default domain GPO but create your own GPOs with custom settings. Thus if you ever make a mistake, you can delete your GPO and still have the default one to fall back on.

This was first published in March 2004

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.