GPO: Do not provision Default Domain Policy as initially enforced. (bz #5480)
authorAndrew Kroeger <andrew@sprocks.gotdns.com>
Thu, 22 May 2008 02:14:06 +0000 (21:14 -0500)
committerAndrew Kroeger <andrew@sprocks.gotdns.com>
Thu, 22 May 2008 02:14:06 +0000 (21:14 -0500)
This only solves part of bz #5480.  The settings for Enforced & Link Enabled
now match the default settings of a Windows DC, but they are still "locked"
and cannot be changed via the GUI.
(This used to be commit 761e667e45475d3a7d5a41558b400ba4c94c4650)

source4/setup/provision_basedn_modify.ldif

index f5e1bb5add6aef7bbcb413aac797750444763787..63332e937b2a72b3930c53506014951047c686fa 100644 (file)
@@ -75,6 +75,6 @@ subRefs: ${CONFIGDN}
 subRefs: ${SCHEMADN}
 -
 replace: gPLink
-gPLink: [LDAP://CN={${POLICYGUID}},CN=Policies,CN=System,${DOMAINDN};2]
+gPLink: [LDAP://CN={${POLICYGUID}},CN=Policies,CN=System,${DOMAINDN};0]
 -
 ${DOMAINGUID_MOD}