Re: Password Policy

From: Patrick Matthews (pgmatthews@msn.com)
Date: 07/29/02 

From: "Patrick Matthews" <pgmatthews@msn.com>
Date: Mon, 29 Jul 2002 08:43:34 -0500

Ok then at the domain level, if in the "default domain policy" I have
maximum password life set to 60 days and the account set to Password Never
expires, doe sthis still hold true? The account setting will over ride the
Default GPO

Thanks

"Paul Adare" <padare@newsguy.com> wrote in message
news:MPG.17af0d0ed131351d9896ac@msnews.microsoft.com...
> In article <OowvULwNCHA.2036@tkmsftngp09>, pgmatthews@msn.com says...
> > I have a user in 'OUnew' and I set the "Password Never expires"option in
his
> > account and there is a GPO applied to "OUnew" that sets the "maximum
> > password life" to 120 days, Will this user be prompted to change his
> > password after 120 days?? Does the account setting override the GPO
setting
> > or is it visa versa?
> >
>
> First of all, password policy, for domain accounts can only be applied
> at the domain level. If you set password policy at the OU level, you
> will be affecting local accounts on any computers in that OU, the
> password policy will have no affect what so ever on domain accounts.
>
> Having said that, the Password Never Expires option on an account
> overrides GPO based password policy.
>
> --
> Paul Adare
> Everyone is left-handed until they commit their first sin.

Relevant Pages

  • Re: GPO causing client security logs to fill?
    ... a virus in play. ... settings to be applied on your client workstations. ... Group Policy is a complex and often misunderstood beast. ... I modified the account ...
    (microsoft.public.windows.server.sbs)
  • Re: The local policy of this system does not permit you to logon i
    ... Security policies were propagated with warning. ... Error 0x534 occurs when a user account in one or more Group Policy objects ... I have checked the security policies & the administrator profile is not ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO causing client security logs to fill?
    ... Unlink the Default Domain Controller Policy (As it was not previously ... settings to be applied on your client workstations. ... I modified the account ... So basically, the Account lockout threshold, account lockout ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO causing client security logs to fill?
    ... Possibly delete the Default Domoan Controller Policy (As it did not ... issues as it was about recoverying from a virus which appears to ... with client logon failures. ... I modified the account ...
    (microsoft.public.windows.server.sbs)
  • Re: Password expires for no apparent reason
    ... policy that has set the values to what you see below meaning that users ... So I would define the password age and configure a value in there. ... As Harj said Account lockouts could potentially be a problem as perhaps ... Password expires for no apparent reason ...
    (microsoft.public.windows.server.active_directory)
Quantcast