Re: Account Policy NT 4

From: Paul Adare (padare@newsguy.com)
Date: 05/30/02 

From: Paul Adare <padare@newsguy.com>
Date: Wed, 29 May 2002 18:34:43 -0400

In article <#hEKAu1BCHA.1360@tkmsftngp05>, Vera.Noest@remove-
this.hem.utfors.se says...
> "Paul" <paul.bellefeuille@dyncorp.com> skrev i meddelandet
> news:92df01c20748$5489ec40$9ae62ecf@tkmsftngxa02...
> > How do I apply account lockout (users tries to login 3
> > times with incorrect password and the account get locks)to
> > 9 users and the 10th user this policy does not take affect?
>
> Account policies are applied domain-wide, you cannot have different account
> policies for different users within one domain. The build-in administrator
> account is excluded from some account policies, though.
>

While the above is mostly true (the part about the administrator account
being excluded is not true) for Windows 2000 Group Policy, as per the
subject, the poster is asking about System Polict in NT 4.

Paul, you can use groups in NT 4 System Policy. Put all of the users you
wanted affected by the policy into a group, and then apply the policy to
the group. 

-- 
Paul Adare
A fine is a tax for doing wrong. A tax is a fine for doing well.

Relevant Pages

  • Re: Domain Admin account and lockout Policy
    ... have different account policies for different domain user accounts, ... Topics, Group Policy Management, Concepts, Group Policy Object Editor ... Default Domain Policy Group Policy object (GPO) or in a new GPO that ...
    (microsoft.public.windows.group_policy)
  • Re: Domain Admin account and lockout Policy
    ... have different account policies for different domain user accounts, ... Topics, Group Policy Management, Concepts, Group Policy Object Editor ... Default Domain Policy Group Policy object (GPO) or in a new GPO that ...
    (microsoft.public.windows.group_policy)
  • Re: Problems testiing GPO for password complexity on OU before changing default domain policy
    ... Account policies are only read at the domain level and you can only have one ... apply to the local machine account policy. ... The complex password policy is applied when I logon to the local machine but not when I logon with a domain user which is a member of the OU and security group within that OU. ...
    (microsoft.public.win2000.active_directory)
  • Re: Password Policy for remote users
    ... Account policies. ... You cannot alter the blanket policy for such ... the account policies are not in the User branch but ... a subset of account required to use smart card for login. ...
    (microsoft.public.security)
  • Re: Security Policy for OU?
    ... domain account the DC authenticates you - not the local SAM. ... applying the policy at a level whereby the domain controllers are not within ... > The account policies for domain users only apply if they are in the ...
    (microsoft.public.windows.server.active_directory)