Domain Security Policy

Some technology users confuse domain security policy and domain controller security policy. Experts describe the difference this way: While a domain controller security policy only applies to the specific hardware designated as the domain controller, the domain security policy governs the entire domain. An administrator can, for example, control the required password strength within the domain, change encryption or alter other aspects of domain security by using the domain security policy settings.

Those using Microsoft operating systems (OS) and other OS types can often change domain security policy settings through provided controls. Users can change items like password policy, account lockout policy and other aspects of domain security. In other cases, users may have to use more advanced controls to customize a domain security policy.