Question: is default domain policy enforced?
Answer: 7 Replies. Ideally, the only things that should be in default domain are lockout policy, password policy and kerberos policy. You shouldn't need to enforce the settings.