Re: Set maximum password age for group

From: Danny Sanders (Danny.Sanders_at_cpcmed.org)
Date: 08/12/03 

Date: Tue, 12 Aug 2003 12:57:28 -0600

Account policies are 1 to a domain. Differing account policies (i.e.
different password policies) is one of the reasons to consider a second
domain.

An account policy set on an OU will not override a domain account policy.
The account policy set on an OU is only in effect when the computers in that
OU are logged on locally.

hth
DDS W 2k MVP MCSE

"Rod Bitt" <rrb1973@hotmail.com> wrote in message
news:040601c360fc$ea10a3d0$a101280a@phx.gbl...
> Is there a way to set a maximum password age for a group,
> rather than for the whole domain. I have been asked to
> require members of one department to change their
> passwords every 60 days. I need to force them to do
> this. Any ideas? I am working in a Windows 2000 network
> with just one domain. -Rod

Relevant Pages

  • Re: Group Policy
    ... There is only one account policy that is applied to all ... Having different account policies ... I am working on a project to force my remote VPN users to comply to ...
    (microsoft.public.win2000.active_directory)
  • Re: How do I use Group Policies for controlling security?
    ... > these only apply to the passwords for local user accounts? ... When they log onto the domain the OU account policy gives way to the domain ... >>to set account policies by OU. ...
    (microsoft.public.win2000.security)
Loading