2000 and NT

1) If you logon to the domain from the W2K server yes, the policies apply.
2) Add a new computer to the policy and select the W2K server.
3) Yes, the same as 2 but select a group of users.
You could also use a selective logon script by using the"ifmember" command from the Resource Kit.

A stand alone server does not have any authentication ability. Therefore, you cannot set a policy on it as no one can log into it, it is accessed by logging into the domain in which case your users will have the domain policies applied to them. Whattype of policy do you wish to enforce? If it is just permissions, you can create a group that has access to this server exclusivly and apply your permissions to them.

If you have Nt 4 like PDC, this apply the policies over all the machines groups and users that validates against that, you never could be validated to a member. Anywhere in W2K, you have policies more restrictives, you must configure thats in W2K especifically, and you'll be safe. That's all.

This question was auto closed due to inactivity