Re: How do I use Group Policies for controlling security?

From: Danny Sanders (Danny.Sanders_at_cpcmed.org)
Date: 06/13/03


Date: Fri, 13 Jun 2003 09:16:20 -0600


> Aaahhh... I've been wondering about that! So you mean that
> these only apply to the passwords for local user accounts?

Exactly.

When they log onto the domain the OU account policy gives way to the domain
account policy.
When they log on locally the domain account policy gives way to the local
account policy.

hth
DDS W 2k MVP MCSE

"Invisible" <orphi69@hotmail.com> wrote in message
news:0b3601c33191$97c8bd00$a101280a@phx.gbl...
> >Don't get confused by the "more information" section
> where it describes how
> >to set account policies by OU. Account policies set at
> the OU level only
> >come into play when these particular computers are logged
> in to locally (off
> >the domain).
>
> Aaahhh... I've been wondering about that! So you mean that
> these only apply to the passwords for local user accounts?
>
> Thanks.
>



Relevant Pages

  • *Advice configuring Account Password policy please*
    ... PDC is running NT 4.0 Server. ... Currently the User Manager Account Policy on the PDC is configured so ... that passwords never expire. ... in/ asking them to change their passwords etc. ...
    (microsoft.public.windows.server.general)
  • Re: Set maximum password age for group
    ... Account policies are 1 to a domain. ... different password policies) is one of the reasons to consider a second ... An account policy set on an OU will not override a domain account policy. ...
    (microsoft.public.win2000.security)
  • RE: Password Cracking
    ... But one thing to remember is that any decent password and account policy ... I create two accounts today. ... Past experience tells me that it will crack it. ... I'm now an advocate of one time passwords. ...
    (Security-Basics)
  • Re: Group Policy
    ... There is only one account policy that is applied to all ... Having different account policies ... I am working on a project to force my remote VPN users to comply to ...
    (microsoft.public.win2000.active_directory)