Domain Controller settings would normally be applied in an OU containing all of the domain controllers.
Group Policy can be set at either the OU level or at the domain level. However, even if Group Policy is set at the OU level, there are some Group Policy settings that are usually set at the domain level.
The following table describes the Group Policy typically set at the domain level.
| Target Level for the GPO | Objective of the Group Policy | Group Policy Settings |
|---|---|---|
| Domains | Security | Password, Account, Kerberos Policy, Public Key Trust List |
| Domain Controllers | Security | User Rights, File/Registry Discretionary Access Control Lists (DACLs), Audit/Event log, Local Policies |
| Domain Controllers | Applications | Assign or Publish Administrative Tools |
| Domain Controllers | User Environment | Disable standard user settings |
| Note
Domain Controller settings would normally be applied in an OU containing all of the domain controllers. |