Re: GPO - Password policy do not apply

From: aurelio (aurelio_at_discussions.microsoft.com)
Date: 11/26/04 

Date: Thu, 25 Nov 2004 16:57:02 -0800

This is default domain policy. It is setup on domain level.

"Miha Pihler" wrote:

> Hi,
>
> The only place where you can define password (Account) policy for domain is
> under Default Domain policy or policy that replaces the Default Domain
> Policy.
>
> If you set this policy anywhere else (e.g. on OU) and you have computer
> accounts in this OU, policy will only influence the local user accounts in
> this OU, but _not_ domain user accounts.
>
> Account policies
> http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/AccountPoliciestopnode.asp
>
> I hope this helps,
>
> Mike
>
> "aurelio" <aurelio@discussions.microsoft.com> wrote in message
> news:584A481C-6EB8-445F-8BF0-E75A3E361F5C@microsoft.com...
> >I have a probelm with password policy. It looks like it desn't apply. All
> > other parts of policy apply without problem. This is domain computer
> > policy
> > it applies to all domain computers, no exception. User policy part is
> > disbled. We do not have other computer policies in domain. This is not new
> > policy, it is used before and it worked. I noticed when user changed
> > password
> > to something silly like 'asdf' in front of me. I did a test on my account
> > and
> > you can put whatever you want, but it should be at least 8 characters long
> > with complexity level enabled and history of 12.
> >
> > Any Idea?
>
>
>

Relevant Pages

  • Re: GPO causing client security logs to fill?
    ... a virus in play. ... settings to be applied on your client workstations. ... Group Policy is a complex and often misunderstood beast. ... I modified the account ...
    (microsoft.public.windows.server.sbs)
  • Re: The local policy of this system does not permit you to logon i
    ... Security policies were propagated with warning. ... Error 0x534 occurs when a user account in one or more Group Policy objects ... I have checked the security policies & the administrator profile is not ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO causing client security logs to fill?
    ... Unlink the Default Domain Controller Policy (As it was not previously ... settings to be applied on your client workstations. ... I modified the account ... So basically, the Account lockout threshold, account lockout ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO causing client security logs to fill?
    ... Possibly delete the Default Domoan Controller Policy (As it did not ... issues as it was about recoverying from a virus which appears to ... with client logon failures. ... I modified the account ...
    (microsoft.public.windows.server.sbs)
  • Re: Domain Admin account and lockout Policy
    ... have different account policies for different domain user accounts, ... Topics, Group Policy Management, Concepts, Group Policy Object Editor ... Default Domain Policy Group Policy object (GPO) or in a new GPO that ...
    (microsoft.public.windows.group_policy)