What Are the Default GPOs?

During the installation of AD DS Roles, will create two defaults GPO: Default Domain Policy and Default Domain Controller Strategy.

Default Domain Policy

Default Domain Policy is linked to Domain and affects all the safety principles Domain. It contains password policy Setting the account lockout settings, and Kerberos protocol. As a best practice, which There should be no other policy settings Configuration. If you need to configure additional settings that apply to the entire domain, you must create Set the new policy provided, and then link the domain policy.

Default Domain Controllers Policy

Default Domain Controllers Policy is linked to the domain controller "OU, and only Effect of a domain controller. This policy is designed to provide audit settings and user rights, and should be It cannot be used for other purposes.