If you have ever read my Best Practice for Group Policy blog post then you will know that I encourage you to edit the default domain GPO’s sparingly. The only exception I would make to this rule is when you want to modify the default domain password policy but even then you can create a new password policy GPO linked…

One strange thing that still seems to catch a lot of people out is that you can only have one password policy for your user per domain. This catches a lot of people out as they apply a password policy to an OU in their AD thinking that it will apply to all the users in that OU…. but it…

This weeks setting is a native policy for Windows Vista (or greater) called “Assign a default domain for logon”. As the name suggest it configured the default domain name when a user logs on to the computer. This is very handy in a multi domain environment or if you want to make sure that your newly built computer default to…