Question: what is default domain policy?
Answer: Windows Server 2008 creates a Default Domain Policy GPO for every domain in the forest. This domain is the primary method used to set some security-related policies such as password expiration and account lockout. ... The proper combination of settings can effectively block these types of security vulnerabilities.