The same thing is in the Windows 2003 Deployment Kit: http://tinyurl.com/6qlkh Establishing Group Policy Operational Guidelines
<quote> Do not modify the default domain policy or default domain controller policy unless necessary. Instead, create a new GPO at the domain level and set it to override the default settings in the default policies. </quote> Whether or not it's worth following is another issue that I'd rather not buy into :-) however there was a question in the 294 exam that asked about this, so the official MCP way is as written Cheers Ken : -----Original Message----- : From: [EMAIL PROTECTED] [mailto:ActiveDir- : [EMAIL PROTECTED] On Behalf Of Santhosh Sivarajan : Sent: Monday, 8 November 2004 3:44 AM : To: [EMAIL PROTECTED] : Subject: RE: [ActiveDir] How to Enable a Warning Message During Windows : Logon Welcome : : Hmm....That is the recommended best practice for modifying the default : Software Restriction Policy. : : : : -----Original Message----- : From: [EMAIL PROTECTED] : [mailto:[EMAIL PROTECTED] On Behalf Of ASB : Sent: Sunday, November 07, 2004 11:31 AM : To: [EMAIL PROTECTED] : Subject: Re: [ActiveDir] How to Enable a Warning Message During Windows : Logon Welcome : : Recommended Best Practices from Microsoft: : : http://www.microsoft.com/resources/documentation/windowsserv/2003/standard : /p : roddocs/en-us/srp_bp.asp : : ------ : Do not modify the default domain policy. : : If you do not edit the default domain policy policy, you always have : the option of reapplying the default domain policy if something goes : wrong with your customized domain policy. : ----- : : : : -ASB List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
