Re: security policy

From: Steven L Umbach (sumbach_at_ameritech.net)
Date: 06/07/03 

Date: Sat, 07 Jun 2003 00:51:47 GMT

     Account policies for domain members can ONLY be set at the domain
policy level. If you run the SCA tool, you need to select "configure" after
the analysis if you want changes implemented. Then it is best to reboot as
not all changes can be refreshed by secedit. Also see link on how to restore
default settings to local policy for a machine. --- Steve

http://www.jsiinc.com/SUBL/tip5500/rh5571.htm

"Moises" <wdrago77@hotmail.com> wrote in message
news:026501c32c6d$7d2aa4f0$a501280a@phx.gbl...
Hi:
I have a Domain controller, which had the Domain security
policy configured with some policies like the account
lockout threshold with the option to lock out the account
with three invalid logon attempts. I unchecked this option
because IŽd wanna this policy Žd be undefined , but when
I analized the policies with the Security Configuration
and Analisys I saw that the Database Setting wasnŽt
defined but the Computer setting was defined with the
fisrt configuration (three invalid logon attempts). I did
the secedit command to force the new configuration but it
doesnŽt change.
Also I saw at the Domain Controller security policy and
local security policy and the account policies were
undefined.
Could you help me to refresh the policies and apply the
last configuration at the computer setting and not only to
the database setting?
Thanks
Moises

Relevant Pages

  • Re: Do Not Execute Group Policy for Admins Group
    ... The intent of policy loopback is to replace or merge user configuration ... The computer configuration settings from this list are applied to the ... > so that the group policy will only apply to a certain group of users ...
    (microsoft.public.win2000.group_policy)
  • security policy
    ... policy configured with some policies like the account ... I analized the policies with the Security Configuration ...
    (microsoft.public.win2000.security)
  • Re: More than one GPO on the same OU
    ... How does the Group Policy 'No Override' and 'Block Inheritance' work? ... NO OVERRIDE option of a GPO ... > COMPUTER CONFIGURATION ... [Christoffer Andersson] ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Question
    ... If you only have the computer account in the OU, the User Configuration half ... of the policy won't apply. ... OU heirarchy below) to which the GPO is linked for it to apply. ... > Group Policy was applied from: ...
    (microsoft.public.win2000.group_policy)
  • Re: Difference between Computer and User confiiguration
    ... From the description of loopback it is exactly what I want. ... User policy only applies to user accounts, and if the GPO is linked to an OU ... under user configuration to a machine OU? ... configuration settings higher precedence. ...
    (microsoft.public.windows.group_policy)