Re: Account Lockout Policy

From: John M (sdkfj_at_microsoft.com)
Date: 01/22/04 

Date: Thu, 22 Jan 2004 14:51:50 -0600

there is no way to limit who gets the policy
here is some info...
Here are a few articles and whitepapers that will help you on your issue.

Windows 2000 Group policy Whitepaper

http://www.microsoft.com/windows2000/techinfo/howitworks/management/grouppol
wp.asp

Account Lockout Whitepaper

http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=8c8e
0d90-a13b-4977-a4fc-3e2b67e3748e

Troubleshooting Common Active Directory Setup Issues in Windows 2000

http://support.microsoft.com/?kbid=260371

The few white papers and tools

http://support.microsoft.com/default.aspx?scid=KB;EN-US;255550

http://support.microsoft.com/default.aspx?scid=KB;EN-US;259576

http://support.microsoft.com/default.aspx?scid=KB;EN-US;299656

"Clarence" <raven_2517@hotmail.com> wrote in message
news:ekZfM5Q4DHA.3752@TK2MSFTNGP11.phx.gbl...
> Since I'm unable to have different policies for Administrators and users
> because the setting is domain-wide, what I'd like to do is deny the
account
> lockout on a group for our Service Accounts.
>
> I tried to add the security group to the Default Domain Policy and checked
> Deny on Apply Group Policy but it didn't work.
>
> Is there another way to get this to work?
> Has anyone successfully had multiple account policies on one child domain?
>
> Thanks.
>
>

Relevant Pages

  • Re: Stop Certain user accounts logging onto pc??
    ... just put that account into the "Deny Logon ... Locally" list and enable that policy. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Account Lockout Policy
    ... Here are a few articles and whitepapers that will help you on your issue. ... Account Lockout Whitepaper ... > I tried to add the security group to the Default Domain Policy and checked ... > Deny on Apply Group Policy but it didn't work. ...
    (microsoft.public.win2000.security)
  • Re: Group policy setting
    ... account you wish to use to reverse these settings. ... Log off and then log back in as that account. ... Remove the Deny that was set above. ... Now use the tools to edit local security policy ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Group Policy
    ... Local policy affects all account equally. ... Note that an account with such a Deny set for it will no ...
    (microsoft.public.windowsxp.security_admin)
  • Re: GPO causing client security logs to fill?
    ... a virus in play. ... settings to be applied on your client workstations. ... Group Policy is a complex and often misunderstood beast. ... I modified the account ...
    (microsoft.public.windows.server.sbs)
Quantcast