Re: Password Policies

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 06/10/05

  • Next message: Ferdie: "Re: Dump Domain Admins group to text?"
    Date: Thu, 09 Jun 2005 18:41:34 -0400
    
    

    You can not override the domain policy for domain users. If you apply a GPO with
    another policy to an OU, it will set the policy for the local workstations and
    the userids that exist on those workstations. Any user using a domain ID on
    those workstations would still have the domain policy applied to them.

       joe

    --
    Joe Richards Microsoft MVP Windows Server Directory Services
    www.joeware.net
    Rene Heroux wrote:
    > I've organized my Active Directory into various OUs, and one of them is 
    > called Remote Users. 
    > 
    > If I create a GPO for this OU and check the Block Policy Inheritance 
    > checkbox, would this mean that the computers in the Remote Users OU would be 
    > excluded from the sitewide Password Policy rules as defined in the Default 
    > Domain Policy? 
    > 
    > I'm just trying to figure out someway around this restriction... as most of 
    > you probably know salesmen are hard enough to deal with on a day-to-day basis 
    > without giving them yet another task to do. (And yeah, it should be easy 
    > enough but you should see some of the calls I get sometimes, heh.)
    

  • Next message: Ferdie: "Re: Dump Domain Admins group to text?"

    Relevant Pages

    • Re: group policy preferences
      ... Microsoft Windows XP Operating System Group Policy Result tool v2.0 ... GPO: ShockwaveTest ... GPO: Default Domain Policy ...
      (microsoft.public.windows.server.active_directory)
    • RE: Should this GPO setting Apply?
      ... def-dom-pol and applied it specifically to the OU where I wanted the GPO to ... have this GPO linked to it (only the Default domain Policy), ... still applies to the user when configuring outlook... ... the Default Domain Policy is being applied... ...
      (microsoft.public.windows.server.active_directory)
    • Re: Not Applied GPO
      ... If the Default Domain Policy is set to be enforced (no override ... I go back the Server use the Group Policy ... >> If you create a new GPO and link it to an OU, ...
      (microsoft.public.windows.group_policy)
    • Re: Applying Group Policies
      ... No Override and Block Inheritance are now more clear. ... The policy I have been editing is just the default domain policy. ... >> The GPO is linked to the OU however the changes are not being reflected on ...
      (microsoft.public.windows.group_policy)
    • Re: Applying GPs to 2000 professional in 2003 domain
      ... The GPO does lock the password protect setting for XP & 2000 PRO, ... I don't know which GPO this applies to though. ... the local group policy. ... We've successfully migrated 2000 pro and XP workstations to the domain. ...
      (microsoft.public.windows.group_policy)