Re: domain security policy

Thanks your info Brian,

To prevent the requirement to change passwords,
am I right that I can set it from the "Account Tap" of the user property
from "AD User and Computer"--> make it to "never expire".

Thanks again

Patrick





"Brian Komar (MVP)" wrote:

Some answers inline.
"Patrick" <Patrick@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F49EB9FC-BD85-4504-A0A0-E48994398E56@xxxxxxxxxxxxxxxx
Thanks all your help.

I want to setup a security policy on Windows 2000 domain environment to
enforce general user to change their password every 3 months and something
like enforce password history, a/c lock out.

I have the following question:
- Is it applied to all domain users inclued "Domain Administrator"?

Yes, unless there is a specific account setting override
- How can exclude some of users like "Domain Administrator" and some
services a/c of above setting?

Yes, for the specific account, you can choose to prevent the requirement to
change passwords. But, if you set up complexity, etc, then it must be
followed.

- If I set these policy in a new created OU level and move geneal user
computer object to this OU (not server and DC object), am I right that the
policy will only apply to these computer.

Nope. Account policy is domain wide in a Windows 2000 (and 2003) domain. It
applies to *all* users in the domain.

- What is the best prastice to apply these domain security setting?

Like you are doing.


Thanks for your help.

Patrick




.

Relevant Pages

  • RE: privecy
    ... When you log onto the computer as a user with Administrator priveleges you ... can disable,rename and change passwords for other accounts, including the ... If your user account has Administrator ... In the right pane, ...
    (microsoft.public.windowsxp.security_admin)
  • RE: How do I stop...
    ... It sounds like it is time to change passwords and enforce strong passwords. ... Make sure you don't have a guest account enabled or a test account with a ... On the right, click "SMTP Protocol". ... The authentication method was and the ...
    (microsoft.public.exchange2000.admin)
  • Re: Administrator folder in Documents and Settings - XP Pro
    ... There are two ways to change passwords in the User Accounts ... The other is available only in admin account to reset the password ... > showing the Administrator account on the Welcome screen. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: User account password vs Group policy settings for it
    ... The user's individual settings have precedence. ... > If a user account in AD under the account tab of the users property for ... > domain has a domain policy that says users must change passwords every 90 ...
    (microsoft.public.windows.server.active_directory)
  • Cannot get into an XP account
    ... one account half way through my computer froze, ... account but have limited access so I cannot roll-back or ... even change passwords. ...
    (microsoft.public.windowsxp.general)
Quantcast