Re: Password restrictions

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 06/30/05 

Date: Wed, 29 Jun 2005 18:40:18 -0500

For all "domain" users the password policy must be configured at the domain
level which normally is Domain Security Policy but could be any Group Policy
linked to the domain container. If you have more than one Group Policy
linked to the domain container the GPO at the top of the list has highest
priority. A common mistake is that admins try to configure password policy
for the domain in Domain Controller Security Policy which will notwork. ---
Steve

"Preacher Man" <nospam> wrote in message
news:uIwFbONfFHA.3944@tk2msftngp13.phx.gbl...
>I am having trouble getting a GPO that I created today to give me the
>desired results. My server is a Win2K and the workstation is a WinXP. The
>GPO I created defines some Account policies. The trouble I am having is
>with the enforce password complexity rule. I run gpedit.msc on the XP
>machine and it shows the correct GPO settings but when I go to the server
>and force user to change password at next logon, it ask me to change but it
>does not enforce the rules. Does anyone have any idea on this?
>
> Thanks,
> Preacher Man
>

Relevant Pages

  • RE: Group Policy Connundrum - Stick with it, its confusing!!!
    ... Configuration object of the GPO (vs. ... Group Policy Connundrum - Stick with it, ... Small Business Server Internet Connection Firewall ...
    (Security-Basics)
  • Re: Set GPO for specific user group
    ... Click on the domain name in Group Policy Management, select the GPO and then click the arrow to the left to move it to the top of the list ... Filtering: Denied ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO Question
    ... Group Policy Processing ... As described earlier in this paper, Group Policy is processed in the ... Local Group Policy Object, ... Any domain-based GPO may be enforced by using the Enforce ...
    (microsoft.public.win2000.group_policy)
  • Re: group policy preferences
    ... Microsoft Windows XP Operating System Group Policy Result tool v2.0 ... GPO: ShockwaveTest ... GPO: Default Domain Policy ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group Policy Downloading unchanged GPOs
    ... Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at http://www.sdmsoftware.com/products.php ... On analysis we understand that if a CSE has multiple GPO's then even if one of the GPO changes, all the GPO's belonging to that CSE gets read. ... words, they are not held in some separate place on the client), then yes, all settings from all 3 GPOs would be read by the client if just one GPO changes. ...
    (microsoft.public.win2000.group_policy)