Windows Security Service and
local policies:
Local Security Policy:
Open: Control Panel - Administrative Tools - Local Security Policy
Secpol. Msc
account policy: password policy; account lockout policies
Local policies: Audit Policy (used to make windows security log monitoring); User Rights Assignment; security options
Administrative Tools - Event Viewer
Gpupdate refresh command policy
Local Group Policy: Group Policy is a collection called Group Policy (and user groups does not matter)
Gpedit. Msc open
Domain Group Policy
Settings object: stored in the GPO, two Default: Default Domain Policy; Default Domain Controller Policy
OU inherits the default domain policy settings: Right may block inheritance; group policies can be forced to inherit the
delegation: Strategies for individuals can refuse
A synergistic effect of Domain Group Policy:
If the strategy does not conflict with a plurality of containers, the final strategy is the sum of all Group Policy
Group Policy Group Policy coverage if a conflict occurs, the application after the first application
Application order:
LSDOU: behind the high-priority
local Group Policy objects: local
site group policy: site
domain Group Policy: domain
if the current user belongs to a computer or OU
Job: Group Policy Management Editor, in Computer Configuration and User Configuration difference between
computer configuration takes effect only for container computer
user configuration takes effect only for users in a container