Re: NEW GPO Policy

From: Paul Adare (padare_at_newsguy.com)
Date: 10/17/05 

Date: Mon, 17 Oct 2005 08:17:27 -0400

In article <1129550991.327230.314050@f14g2000cwb.googlegroups.com>, in
the microsoft.public.win2000.security news group, <striffy@gmail.com>
says...

> Hi,
> Was testing my Lab set-up for AD 2003.
> I've created a simple Password Policy (turned off complex password).
> Applied / Linked this to the Users OU.

By default Users is a container object and not an OU which means you
can't link a GPO to it. I'm assuming that you've created an OU and moved
the user accounts there. Not that this really matters for what you're
trying to do here.

> Unfortunately it still asks for
> a complex password, so I then tried Blocking Inheritence to stop the
> Default Domain Policy, but still no luck.
> Can someone help me? or is it not possible, does it have to be done in
> the Default Domain Policy?

Password policy can only be set at the domain level for it to affect
domain user accounts. 

-- 
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca/blogs/paul/
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern 
computer geeks finds it impossible to detect a joke that is not clearly 
labeled as such."
Ray Shea

Relevant Pages

  • Re: Simple question on Password Policy
    ... The password policy is enforced by whatever computer owns the user account. ... Default Domain policy so that it is enforced by all domain member computers ... For domain user accounts, it is the domain ... those computers enforce whatever password policy applies to ...
    (microsoft.public.win2000.group_policy)
  • Re: Password policy question
    ... > We currently have a Windows 2003 and Novell 5 infrastructure. ... When I set a password policy on my Win2003 domain will it take ... > 60 days and the user accounts have never had to change before? ... > settings than the domain policy For example the default is change ...
    (microsoft.public.windows.server.active_directory)
  • RE: How to Enforce Complex Password Policy for Selected Users Only
    ... We use Password Policy ... and effects ALL user accounts for that domain. ... How to Enforce Complex Password Policy for Selected Users Only ...
    (Focus-Microsoft)
  • Re: where to apply?
    ... >>You can not have a password policy applied to the OU level and have it ... >>user accounts to any computer account objects that might reside in the OU ... You apply the password policy GPO to his OU. ... The Password Policy affects all user account objects. ...
    (microsoft.public.win2000.group_policy)
  • Re: where to apply?
    ... >Password Policy is a special animal. ... >user accounts to any computer account objects that might reside in the OU to ... You apply the password policy GPO to his OU. ... Thanks Mini Me. ...
    (microsoft.public.win2000.group_policy)