RE: Windows 2000 password policy

From: Jim Barrett (jimb_at_ins.com)
Date: 06/23/03

  • Next message: Leo, Joel: "RE: Windows 2000 password policy" 
    To: "'hong li'" <hong_li_98@yahoo.com>, <focus-ms@securityfocus.com>
Date: Mon, 23 Jun 2003 16:59:25 -0400

    Nope. You can't get there from here as the saying goes. This is
    because Windows 2000 had to maintain backward compatibility with NT 4.0,
    and in NT 4, the Domain was the security boundary. Same is true with
    W2k/W2k3.

    You will see the options for setting password policy in the OU GPO, but
    changes there will not affect anything.

    Jim

    Jim Barrett, MCSE, CISSA, CISSP, CCNP
    Principal Consultant
    International Network Services
    Boston, MA

    -----Original Message-----
    From: hong li [mailto:hong_li_98@yahoo.com]
    Sent: Monday, June 23, 2003 1:16 PM
    To: focus-ms@securityfocus.com
    Subject: Windows 2000 password policy

    Hi, everyone

    Does anyone know that you can set password policy
    change at OU level instead of domain level? or any
    other suggestions?

    Thanks!

    Hong

    __________________________________
    Do you Yahoo!?
    SBC Yahoo! DSL - Now only $29.95 per month!
    http://sbc.yahoo.com

    ------------------------------------------------------------------------
    -----
    ------------------------------------------------------------------------
    ------

    -----------------------------------------------------------------------------
    ------------------------------------------------------------------------------

  • Next message: Leo, Joel: "RE: Windows 2000 password policy"

    Relevant Pages

    • Re: Password policy
      ... Password policies must be set at the domain level. ... Windows 2003 as well. ... > the password policy, and link it to domain controllers. ... > replicate to all domain computers. ...
      (microsoft.public.win2000.security)
    • Password cannot be changed in organization
      ... I have Windows 2000. ... Password policy is domain level. ... I have minimum password time as: ...
      (microsoft.public.win2000.active_directory)
    • RE: Windows 2000 password policy
      ... It still has the Windows default settings. ... You can set a password policy on an ou, but it will only affect _local_ ... change at OU level instead of domain level? ...
      (Focus-Microsoft)
    • RE: Windows 2000 password policy
      ... You can set a password policy on an ou, but it will only affect _local_ ... Joel ... Subject: Windows 2000 password policy ... change at OU level instead of domain level? ...
      (Focus-Microsoft)
    • Re: Retire or Upgrade and Retire?
      ... I would think this server was a BDC promoted to PDC and then upgraded ... to Windows 2000. ... DC and then raise our domain level to Native Mode 03. ...
      (microsoft.public.windows.server.general)