Windows Services and Security

Windows Services and Security

Local Policy:

Local Security Policy:

Open: control Panel-Administrative tools-Local Security Policy

Secpol . Msc

Account policy: password policy; account locking policy

Local policy: audit policy (used to monitor windows security logs); user rights assignment; security options

Management tool-event Viewer

Commands for Gpupdate refresh policy

Local Group Policy: a collection of policies is called Group Policy (independent of user groups)

Gpedit . Msc open

Domain group policy

Set object: saved in GPO, default two: default domain policy and default domain controller policy

OU default inheritance domain policy settings: right click to prevent inheritance; group policy can force inheritance

Delegate: you can reject policies for individuals

Overlay effect of domain group policy:

If the policies of multiple containers do not conflict, the final policy is the sum of all group policies.

In the event of a conflict, the group policy applied later overrides the group policy applied first

Application order:

LSDOU: high priority behind

Local Group Policy object: local

Site Group Policy: site

Domain Group Policy: domain

If the current computer or user belongs to an OU

Jobs: differences between computer configuration and user configuration in the Group Policy Management Editor

Computer configuration takes effect only for computers in the container

User configuration takes effect only for users in the container