Re: Password policy in domain 2003

You can - but for accounts that reside in the local SAM databases of
computers in that OU. You will certainly notice that it only applies to
computers, and not to users. For domain accounts, the domain level password
policy still applies.

--
---
HTH,
Dobromir

Learn more about Security and Identity Management:
Visit http://www.iamechanics.com

"?????.?" <@discussions.microsoft.com> wrote in message
news:120460DB-2E9D-41B4-BD51-21A8FEDCFAED@xxxxxxxxxxxxxxxx
Hi

As far as I know there can be only one password policy.
I configured the main GPO in the root for specific password policy, I have
an OU with blocked inheritance is checked, and I created a new gpo and
linked
it to this OU, this gpo have a diffrent set of password policy, I run the
RSOP on the server under that OU, and I got the new set of password policy
that is linked to this OU.
So, Can I use a diffrent password policy in diffrent OU's ?
or, I missing somthing?

thanks

Lior



.

Relevant Pages

  • Re: Password policy in domain 2003
    ... there is only one account and password policy for domain accounts. ... If one sets these at a different level (not at domain level) such as ... have impact on machine local accounts defined on the computers ...
    (microsoft.public.security)
  • Group Policy: multiple password policies in the same domain?
    ... I'm trying to lock down some domain "service" accounts (backup, ... Exchange, SQL Server, Scheduled Tasks, etc.) where I work. ... Would applying the policy to a specific set of computers affect only the ... that only the password policy on the domain controllers would affect ...
    (Focus-Microsoft)
  • RE: Group Policy: multiple password policies in the same domain?
    ... You can only affect domain accounts at the ... domain level, but you do NOT have to use the "Default Domain Policy" GPO. ... users in the domain who are people rather than computers. ... password policy applies to *any* account stored in AD. ...
    (Focus-Microsoft)
  • RE: Group Policy: multiple password policies in the same domain?
    ... Password policies for accounts stored in Active Directory can *only* be set ... the computers within the OU in question. ... My theory is that only the password policy on ...
    (Focus-Microsoft)
  • Re: SOX compliant .. different password policy need for privil
    ... I am curious to know if once a forest and a root domain is created, ... have the password policy for the new ... match the existing domain, move all user accounts to the new domain, ... and keep the privileged accounts in the existing domain (after all ...
    (microsoft.public.win2000.active_directory)