Should be ok to simply remove the link. The settings from the DDC GPO should not
persist after removal.
Tony
---------- Original Message ----------------------------------
From: "Rimmerman, Russ" <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Date: Tue, 27 Jul 2004 08:34:19 -0500
We're majorly scr*wed right now. Someone linked our default domain
controller policy to our whole domain yesterday. That really foobars log on
locally rights on every PC. Of course no one will fess up to it. I just
enabled Success auditing of Directory Service Accesses as we were only
auditing failures.
If we delete the link, will the 'Not Defined' take back over and undo this
mess, or are we going to have to go in and define log on locally for the
default domain GPO now to fix the mess?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This e-mail is confidential, may contain proprietary information
of the Cooper Cameron Corporation and its operating Divisions
and may be confidential or privileged.
This e-mail should be read, copied, disseminated and/or used only
by the addressee. If you have received this message in error please
delete it, together with any attachments, from your system.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
________________________________________________________________
Sent via the WebMail system at mail.activedir.org
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
