Below you can find a screenshot of Group Policy Management console on Windows Server 2008 R2 Domain Controller right after the clean installation (and promoting to a DC).
These are the default Default Domain Policy settings on a clean Domain Controller. Not sure if it makes a difference but Forest and Domain functional level is Windows Server 2008 R2.
Please be careful when editing Default Domain Policy as removing wrong settings can break applications that rely on it (like Exchange).
and Default Domain Controllers Policy default settings:
[...] the original post: Windows Server 2008 R2 Domain Controller Default Domain Policy … No [...]
That is very helpful, any chance you could post the default “Default Domain Controller Policy” settings as well? The previous admin fealt that all GPO changes should be made in the default policies as apposed to creating new ones.
Yep. I know the feeling. Inherited a network from similarily talented guy. I’ll try to post them in a second.