Posted 09 March 2012 - 10:47 PM
The domain controller security settings only affect servers set up as domain controllers. Standard servers and workstations will not be affected by these settings.
Domain security setting affect ALL domain controllers, servers and workstations.
Keep in mind also how security is applied to any given machine. It goes by site, domain, group, and then OU. Each time you move down a level it generally overrides the next so domain overrides site, group overrides domain, and OU overrides group. The exception to this is enforcing the domain policy which make the policy below it not able to override any setting made at the domain level.
The domain controller setting is essentially a built-in group.
Get your facts first, then you can distort them as you please.