Re: GPO - Password policy do not apply

From: Miha Pihler (mihap-news_at_atlantis.si)
Date: 11/25/04 

Date: Thu, 25 Nov 2004 20:58:05 +0100

Hi,

The only place where you can define password (Account) policy for domain is
under Default Domain policy or policy that replaces the Default Domain
Policy.

If you set this policy anywhere else (e.g. on OU) and you have computer
accounts in this OU, policy will only influence the local user accounts in
this OU, but _not_ domain user accounts.

Account policies
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/AccountPoliciestopnode.asp

I hope this helps,

Mike

"aurelio" <aurelio@discussions.microsoft.com> wrote in message
news:584A481C-6EB8-445F-8BF0-E75A3E361F5C@microsoft.com...
>I have a probelm with password policy. It looks like it desn't apply. All
> other parts of policy apply without problem. This is domain computer
> policy
> it applies to all domain computers, no exception. User policy part is
> disbled. We do not have other computer policies in domain. This is not new
> policy, it is used before and it worked. I noticed when user changed
> password
> to something silly like 'asdf' in front of me. I did a test on my account
> and
> you can put whatever you want, but it should be at least 8 characters long
> with complexity level enabled and history of 12.
>
> Any Idea?

Relevant Pages

  • Re: RSoP Lockout Account
    ... major part of the Domain concept is a unified and enforced security regime. ... The password policy is enforced by the computer (i.e. a domain controller ... not when the user account is authenticated by that computer. ... controllers won't have any affect on domain user accounts. ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO causing client security logs to fill?
    ... a virus in play. ... settings to be applied on your client workstations. ... Group Policy is a complex and often misunderstood beast. ... I modified the account ...
    (microsoft.public.windows.server.sbs)
  • Re: The local policy of this system does not permit you to logon i
    ... Security policies were propagated with warning. ... Error 0x534 occurs when a user account in one or more Group Policy objects ... I have checked the security policies & the administrator profile is not ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO causing client security logs to fill?
    ... Unlink the Default Domain Controller Policy (As it was not previously ... settings to be applied on your client workstations. ... I modified the account ... So basically, the Account lockout threshold, account lockout ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO causing client security logs to fill?
    ... Possibly delete the Default Domoan Controller Policy (As it did not ... issues as it was about recoverying from a virus which appears to ... with client logon failures. ... I modified the account ...
    (microsoft.public.windows.server.sbs)