Re: GPO not picking up computer settings

Hi Steve,

Are there any latency issues with the application/enforcement of GPOs. I
have come in this morning and found two users who have been asked to change
their passowrds and when they try to do so, they get hammered with
complexity rules. But there is nothing special about these users, they are
in the same OUs as all the others, so why have only they been affected?
And, I have now gone and deleted the test GPO that I had linked to the test
OU, and I have gone and not defined the setting for account lockout and
passwords in the Default Domain Policy. However, I still can't change the
effective user's password back to what it was originally due to password
settings. This is crazy. So I am thinking that there must be some kind of
latency. Is there a way to force the propogation of policy settings?

TIA,

Jarryd

"Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:uMgpvwcWGHA.3684@xxxxxxxxxxxxxxxxxxxxxxx
Run RSOP mmc snapin against a domain controller to see what it shows for
password settings for domain users and the enforcing GPO which by default
would be domain security policy but as Roger said could be any GPO lined
to the domain container and the higher a GPO is in the list the more
precedence it takes. You can also run net accounts on a domain controller
to see what is shown for password policy settings other than complexity.
Net accounts run on a domain member computer will show the settings for
local user accounts on that computer. The link below explains more and
even though it does not explicitly say so account policies also are
defined in the domain container for Windows 2003 as shown for Windows
2000.. --- Steve

http://support.microsoft.com/kb/259576/


"Jarryd" <j@xxx> wrote in message
news:eM248rYWGHA.3848@xxxxxxxxxxxxxxxxxxxxxxx
OK, I have managed to get the GP Management tool to pick up the settings
and it says that it is applying them in the way that I want them to on
the machine and user against which I ran the test. I went in to the
Local Policy and it has picked up the settings. But when I try to change
there password it lets me do it with less characters that required, it is
not picking up the history of old passwords, and it isn't enforcing
complexity. I really don't understand this.

Please help!!

Jarryd

"Jarryd" <j@xxx> wrote in message
news:e8T1EbYWGHA.5012@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

I have created a Group Policy for remote users. The only settings I
have configured are the ones that pertain to passwords and account
lockout. I have moved those users to an OU that is linked to the new
GP, but the settings weren't taking affect. So I generated a report and
it came back saying the policy was empty. But that's just wrong. If I
go in and configure user settings those are picked up, but the computer
settings aren't. Why?

TIA,

Jarryd







.

Relevant Pages

  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... Server Security and Auditing Policy ... This list only includes links in the domain of the GPO. ... The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... > Server Security and Auditing Policy ... > This list only includes links in the domain of the GPO. ... > The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO not picking up computer settings
    ... to the domain container with the password/account settings you want. ... for password/account settings and from what GPO. ... buying any of the highly rated AD or Group Policy books you see at Amazon or ... I have changed all the passwords back to what they were so users are now ...
    (microsoft.public.windows.server.security)
  • Re: Local GPO refreshes outside of refresh interval
    ... I looked through my GPO's Windows Settings section ... > Some policies, including IE policies, have a checkbox that defines if this ... > it should apply EVEN if the value defined in GPO did not change since the ... we are talking about one particular policy: ...
    (microsoft.public.windows.group_policy)
  • Re: IE Maintenance Group Policy Settings Issue
    ... If you configure a GPO to set the proxy to blank, ... be identified as a change to the policy and it will be re-applied to the ... This would be a GPO change and the settings ...
    (microsoft.public.win2000.group_policy)