Password Policy Problem

From: Xaos Flux (xaosflux@bellsouth.net)
Date: 09/01/02 

From: "Xaos Flux" <xaosflux@bellsouth.net>
Date: Sat, 31 Aug 2002 21:47:56 -0400

I have tried to change my domain password policy repeatedly to no avail. I
have set password policy in the OU my Domain Controllers are in, set it in
Domain Security Policy, Domain Controller Security Policy, Local Security
Policy on the DC as well, but none of the changes are becoming effective. I
am running Windows 2000 Advanced server and was doing all of this from my
PDC. I *AM* able to effect these changes by using 'net accounts
/%option%=%value% /domain' though. I added my Domain Controllers group
specific read permissions to their ou and their GPO , made sure nothing was
blocking policy inheritance, ect...Do these changes need to be set in
Default Domain Policy? Additionally I was unable to implement password
complexicity rules from these same places, and it is not available from
command line. I notice I do NOT have a \%windir%\system32\passfilt.dll
file...If this is all I need where can I obtain a replacement?

Thank you,
Brian Mulrooney
Network Administration
Riverside Bank

Relevant Pages

  • Re: Default Domain Policy Question
    ... I have never seen password policy applied to the domain controllers ... >> applied and was demonstrated as prevailing policy to domain user accounts ...
    (microsoft.public.windows.group_policy)
  • RE: Effective Security
    ... Changes Are Not Applied When You Change the Password Policy ... The Block Policy Inheritance option is enabled on the Domain Controllers ... Domain Controllers organizational unit: ...
    (microsoft.public.win2000.setup)
  • Re: Default Domain password policy issue
    ... The domain controllers are members of authenticated users. ... as for applied Group Policy objects for computer settings. ... Policy replication/version problems. ... The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.windows.group_policy)
  • Re: Blocking port scans on local network
    ... You can implement enumeration of SAM accounts and shares with probably no ... on domain controllers via Domain Controller Security Policy depending of ... domain computer that has a "require" ipsec policy assigned to it. ... between domain computers and domain controllers as the domain controllers ...
    (microsoft.public.win2000.security)
  • RE: Account Lockout Policy
    ... he didn't say that the policy would be *linked* at ... the Domain Controllers OU, just that the domain password policy would apply ... the Domain Controllers OU will still use the password policy that is defined ... they still utilize the domain-level account settings, because, again, the ...
    (Focus-Microsoft)