List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: Re: [ActiveDir] Design decision: descoping Default Domain Controllers policy

Prev Next

You are not authorized to post a reply.

Author

Messages

Posts:59

02/01/2012 8:39 PM
I have checked SQL Server installation on a domain controller today and that also modified the DDC GPO, adding some user rights. There is one thing that is common in all scenarios: user rights are added, not removed. Business impact of that would be nil; the risk is easily mitigated by tracking the changes to the GPOs. cheers Slav On 1/02/2012 1:13 PM, Free, Bob wrote: > FWIW I have seen install routines from some large vendors modify the DDCP, particularly, the user rights assignment. > > It has been a while but I have seen it on several occasions. Generally the behavior I observed was the adding the ID of the logged in user to the policy settings in the DDCP during software installs. > > I got in the habit of running diff reports against the policy in the lab before it went to prod whenever any 3rd party cr@p had to be installed. > List info: http://www.activedir.org/List.aspx

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > Re: [ActiveDir] Design decision: descoping Default Domain Controllers policy

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads