A domain controller always pulls the account policy from the Default Domain Policy Group Policy Object (GPO), even if there is a different account policy that is applied to the organizational unit that contains the domain controller. The account policy must be defined in the Default Domain Policy, and it is enforced by the domain controllers that make up the domain. For domain accounts, there can be only one account policy. This policy setting does not apply to administrator accounts, but it behaves as an account policy. This setting affects the Server Message Block (SMB) component.
This security setting determines whether to disconnect users who are connected to the local device outside their user account's valid logon hours. Describes the best practices, location, values, policy management, and security considerations for the Network security: Force logoff when logon hours expire security policy setting.
0 kommentar(er)
