Active Directory Tip: Improving the default domain controller GPOs

[SearchWin2000.com]

Title: Active Directory Tip

April 20, 2004 Published by  SearchWin2000.com Active Directory Tip Issue Sponsored By: Win a Rio S35S Sport digital audio player! IN THIS ISSUE: Improving the default domain controller GPOs The importance of physical security for DCs New groups in Active Directory Basic DNS records for DCs Ask Jeremy Moskowitz: Can OUs enforce different GPOs for password policies? Improving the default domain controller GPOs [James Michael Stewart] When Windows Server 2003 is used to establish an Active Directory based network, there are two default GPOs: the default domain GPO and the default domain controller GPO. These GPOs are configured to provide a basic minimal level of security for your domain network and its domain controllers. However, there are several ways to improve upon the default settings in these two GPOs. Win a Rio S35S Sport digital audio player! Browse the SearchWin2000.com tips for the latest updates in Windows Administration, Security, Active Directory, Certification and more! Submit a tip this month and you could win a Rio S35S Sport digital audio player! Visit today! The importance of physical security for DCs [James Michael Stewart] No matter how much effort you put into securing a domain controller from a hardware or software perspective, no amount of logical or technical security controls will prevent a security breach if physical access security is not maintained. New groups in Active Directory [James Michael Stewart] Creating new groups in Active Directory is accomplished in much the same manner as creating a new user or a new OU. Simply right-click on the OU that will contain the new group in the Active Directory Users and Computers console and select New > Group from the pop-up menu. Next, provide the group name, select a group type and select a group scope. Once the group is created you can manage its memberships. Basic DNS records for DCs [James Michael Stewart] When you install a domain controller, the Active Directory Wizard that performs the configuration and setup of the Active Directory structure will also register RR (resource record) and SRV (service record) records for the DC with DNS. Use this list of standard DNS records to compare and contrast your DNS configuration. TOPICS: Secrets of Terminal Services Going with a Terminal Services solution has its pluses and minuses. But if you're looking for some expert advice, tips and insights to guide you, you'll find what you need here. NEWS: Unsupported Windows a disaster waiting to happen Partners Healthcare System is looking to migrate off Windows 2000, but leaving some systems in place past Microsoft's extended support date during a phased-in upgrade is "untenable." ASK THE EXPERTS: Ask Jeremy Moskowitz: Can OUs enforce different GPOs for password policies? Dear Jeremy, I have a Windows 2003 DC and two OUs for users. Can I have one OU that enforces one GPO for password policies and the other OU enforce a different GPO for password policies? Contact Us Sales For sales inquiries, please contact us at: [EMAIL PROTECTED] Editorial For feedback about any of our articles or to send us your article ideas, please contact us at: [EMAIL PROTECTED] Free E-Newsletters! Select e-newsletters you would like to receive via e-mail! SearchWin2000: Security Tip Not a Member? We'll activate your membership with your subscription. ABOUT THIS E-NEWSLETTER This e-newsletter is published by SearchWin2000.com, a targeted Web site from TechTarget, the most targeted IT media and events company. Copyright 2004 TechTarget. All rights reserved. To unsubscribe from "Active Directory Tip": Go to unsubscribe: http://searchWin2000.techtarget.com/u?track=NL-23 Please note, unsubscribe requests may take up to 24 hours to process; you may receive additional mailings during that time. A confirmation e-mail will be sent when your request has been successfully processed. Contact Us: SearchWin2000 MemberServices 117 Kendrick Street, Suite 800 Needham, MA 02494