Re: GPO - Password policy do not apply

From: Gcorpuz (Gcorpuz_at_discussions.microsoft.com)
Date: 11/29/04 

Date: Sun, 28 Nov 2004 19:01:05 -0800

What group did you filter? Is "Everyone" group or a security group that you
created. Make sure that "Read and Apply" is set on them....

"aurelio" wrote:

> This is default domain policy. It is setup on domain level.
>
> "Miha Pihler" wrote:
>
> > Hi,
> >
> > The only place where you can define password (Account) policy for domain is
> > under Default Domain policy or policy that replaces the Default Domain
> > Policy.
> >
> > If you set this policy anywhere else (e.g. on OU) and you have computer
> > accounts in this OU, policy will only influence the local user accounts in
> > this OU, but _not_ domain user accounts.
> >
> > Account policies
> > http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/AccountPoliciestopnode.asp
> >
> > I hope this helps,
> >
> > Mike
> >
> > "aurelio" <aurelio@discussions.microsoft.com> wrote in message
> > news:584A481C-6EB8-445F-8BF0-E75A3E361F5C@microsoft.com...
> > >I have a probelm with password policy. It looks like it desn't apply. All
> > > other parts of policy apply without problem. This is domain computer
> > > policy
> > > it applies to all domain computers, no exception. User policy part is
> > > disbled. We do not have other computer policies in domain. This is not new
> > > policy, it is used before and it worked. I noticed when user changed
> > > password
> > > to something silly like 'asdf' in front of me. I did a test on my account
> > > and
> > > you can put whatever you want, but it should be at least 8 characters long
> > > with complexity level enabled and history of 12.
> > >
> > > Any Idea?
> >
> >
> >

Relevant Pages

  • RE: Group Policy: multiple password policies in the same domain?
    ... > it under access to the GPO. ... The conflict only happens when both policies ... results in having the policy denied. ... > user accounts it affects be able to read it and have "apply ...
    (Focus-Microsoft)
  • Re: Password Policy Basics
    ... but assumed the POLICY would be applied to ALL ... so lcoal machines might start enforcing that policy on ... No, the local accounts are not effected by the domain policy, except you link the policy also to the OU like Florian states. ... I was thinking of service accounts on the servers... ...
    (microsoft.public.windows.group_policy)
  • Re: Windows 2000 users accounts get locked out
    ... I have disabled my accounts lockout policy in my ... >account logon events enabled in Domain Security Policy ... and Domain Controller ...
    (microsoft.public.win2000.security)
  • Re: RSoP Lockout Account
    ... Account Policy, or more specifically any items within Computer ... *domain accounts* can ... account policies per domain, but again, I haven't seen that in writing yet. ... >>> I'm trying to aply a GPO to an OU that contains computers, ...
    (microsoft.public.win2000.group_policy)
  • Re: AD 2000, Blank passwords, and Group Policy
    ... I set up an account with password policy enforced and experienced the same as you ... The only thing I can suggest is to leave the accounts as they ... accounts to change password at next logon. ... I could set the policy to not enforce this until after all ...
    (microsoft.public.win2000.security)