Account Lockout Policy

From: Clarence (raven_2517_at_hotmail.com)
Date: 01/22/04 

Date: Thu, 22 Jan 2004 12:36:11 -0500

Since I'm unable to have different policies for Administrators and users
because the setting is domain-wide, what I'd like to do is deny the account
lockout on a group for our Service Accounts.

I tried to add the security group to the Default Domain Policy and checked
Deny on Apply Group Policy but it didn't work.

Is there another way to get this to work?
Has anyone successfully had multiple account policies on one child domain?

Thanks.

Relevant Pages

  • Re: Filter GPO by group
    ... It's true that the accounts policies only can be defined within athe GPO at ... account policy, if you need diffrent policies for diffrent users, write your ... > Technet recommends to not alter the default Domain policy, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group policy editor
    ... Simply Deny the admin Full Control on the directory ... It will also prevent the account from being able ... to modify policies. ...
    (microsoft.public.windowsxp.security_admin)
  • Account Lockout Policy
    ... I tried to add the security group to the Default Domain Policy and checked ... Deny on Apply Group Policy but it didn't work. ... Has anyone successfully had multiple account policies on one child domain? ...
    (microsoft.public.windows.server.security)
  • Account Lockout Policy
    ... I tried to add the security group to the Default Domain Policy and checked ... Deny on Apply Group Policy but it didn't work. ... Has anyone successfully had multiple account policies on one child domain? ...
    (microsoft.public.windows.server.security)
  • Account Lockout Policy
    ... I tried to add the security group to the Default Domain Policy and checked ... Deny on Apply Group Policy but it didn't work. ... Has anyone successfully had multiple account policies on one child domain? ...
    (microsoft.public.win2000.security)