Local Security Overriding GP?

From: Ben Blackmore (bjblackmore_at_nospam.hotmail.com)
Date: 06/10/04 

Date: Thu, 10 Jun 2004 12:45:28 +0100

Hi,

I'm having a problem with security on some of our PCs. Most work ok, but a
few seem to have their local default security settings overriding our group
policy settings.
In our GP under computer configuration we've set password history to 5,
length to 6, and complexity to enable. However some users have been able to
enter passwords of less than 6 charactors, some even blank.
If you open the local security settings on the offending machines, there is
'local setting' and 'effective setting' effective settings are set to the GP
settings, so it appears the policy is being enforced. But local settings are
set to password history 0, password length 0 and complexity disabled (all
the defaults). I thought effective setting was what is actually being
enforced on the computer, why can users still have blank passwords, when
effective settings say it has to be 6 or more?

We're using Win2k Pro clients, logging onto a Win2k server domain & AD, all
with SP4

Ben

Relevant Pages

  • Re: Windows 2000 SP2 local policy settings not stored using SIDs?
    ... I think you finally answered my question about security settings in Win2k. ... After a few moments I was no longer able to log on to my server ...
    (NT-Bugtraq)
  • Re: Local Account & Password Policy Options Greyed out for Admins?
    ... it seems to have set the security settings back to what they should be. ... Still, the settings for the password and account lockout policies are greyed out, so they still cannot be changed. ... Reboot the computer and you should be able to change password policy in Local Security Policy. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: images blocked
    ... "Steve Cochran" wrote: ... wonder if there's some underlying security settings in that .NET Framework ... So you suggested the Tool> Options & uncheck the HTML content box? ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: images blocked
    ... thanks for the tips and I see my Yahoo web mail still has html graphics. ... "Steve Cochran" wrote: ... wonder if there's some underlying security settings in that .NET ... Have confirmed all the Security settings as described here ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • RE: Windows 2000 security
    ... domain admin from doing anything), ... "Administrator" account of the windows domain of which a machine is a member ... Any security settings in a Windows 2000 domain are managed at the domain ...
    (Security-Basics)
Quantcast