Group Policy
Group Policy |
|
To set Group Policy for a selected Active Directory site, domain, or organizational unit, you must have access to a Windows 2000 domain controller for that Active Directory, and you must have Read/Write permissions to access the system volume of domain controllers (that is, the Sysvol folder), and you must have Modify Rights to the selected directory site, domain, or organizational unit. The system volume folder is created when you install a Windows 2000 domain controller or promote a Windows 2000 server to domain controller.
By default, Group Policy affects all computers and users in an Active Directory site, domain, or organizational unit to which the Group Policy object is linked. However, you can filter the effects of Group Policy, based on users' or computers' membership in Windows 2000 security groups. To filter Group Policy, you use the Security tab on a Group Policy object's Properties page to set permissions. You also use permissions to delegate the use of the Group Policy