In Windows NT 4.0, Domain Security Policy referred to User Password, Account Policy, Audit Policy, and User Rights.
In Windows 2000, the Security Settings snap-in in the Group Policy Editor handles Domain Security Policy.
To configure domain wide security, use Active Directory Users and Computers, right click the domain object, and press Properties. On the Group Policy tab, you can see the linked GPOs. If Default Domain Policy is not linked, Add it. Edit the Default Domain Policy.
If you navigate to Computer Configuration\Windows Settings\Security Settings, the following nodes can be used:
Account Lockout Policy
User Rights Assignment
IP Security Policies on Active Directory
Public Key Policies</b>
The later policies take precedence over earlier applied policy.
Local policy is applied first. When this conflicts with a Domain policy, the Domain policy prevails.