Co-Authored By:

Asked by: Toccara Sung
technology and computing web hostingWhich domain controller options are enabled by default?
The configurable domain controller options include DNS server and Global Catalog, and Read-only domain controller. Microsoft recommends that all domain controllers provide DNS and global catalog services for high availability in distributed environments, which is why the wizard enables these options by default.
Correspondingly, how do I find my default domain controller policy?
A.
- Start the Directory Management MMC (Start - Programs - Administrative Tools - Directory Management)
- Select the domain and right click on "Domain Controllers" and select Properties.
- Select the 'Group Policy' tab.
- The policies in effect will be shown, normally 'Default Domain Controllers Policy".
Besides, what should be in the default domain policy?
According to Microsoft training books the Default Domain Policy should only contain settings for password,account lockout, and kerberos policies. Changes in settings to domain security policy should always be made to the Default Domain Policy GPO.
To verify or set this configuration:
- Log in to a computer in the domain you want to configure using a user account with domain administrator privileges.
- Open a command prompt, type gpmc.
- Expand Forest > Domains > domainName > Domain Controllers.
- Right-click Default Domain Controllers Policy, and then click Edit.