Re: GPO not picking up computer settings



Sorry, for the confusion. The complexity setting on the Default Domain
Policy is set to Disabled. I wrote, "the password settings are to not
Disable complexity,...".

Sorry again,

Jarryd

"Jarryd" <j@xxx> wrote in message
news:%23gTdtfJXGHA.1228@xxxxxxxxxxxxxxxxxxxxxxx
Hi Roger,

The user accounts are domain user accounts. I have removed the GPO that I
had configured with the password settings. So now there is only the
Default Domain Policy and the Default Domain Controllers Policy. I have
configured the Default Domain Policy so that the password settings are to
not Disable complexity, 0 history, 0 days to expiry, 0 minimum password
age, and 1 character minimum length. I have then done a GPUdpate on a DC.
No errors were logged in Event Viewer. However, I still can't change
password back to anything simple, e.g. "password". How is this still
possible? I am not sure that I follow what you said previously, but what
I think you are saying is that if I create a policy and link it to an OU
then the settings in that policy will only affect user accounts held in
the local user DB of machines in that OU, e.g. \\client1\user1 and not
\\domain\user1. So if you want to enforce settings on domain user
accounts you can't do so by adding/moving user accounts to an OU and
linking a GPO to that OU. You have to link it to the domain. But that
will affect all users, and I only want to apply these settings to users
that will be accessing the netword remotely. So do I add these users to a
security group, then remove the Authenticated users from the Security
Filtering list and add that newly created security group (making sure that
have read and apply permissions?

TIA,

Jarryd


"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
news:ON1MaIlWGHA.1192@xxxxxxxxxxxxxxxxxxxxxxx
Those users are domain accounts or machine local accounts ??

"Jarryd" <j@xxx> wrote in message
news:eM248rYWGHA.3848@xxxxxxxxxxxxxxxxxxxxxxx
OK, I have managed to get the GP Management tool to pick up the settings
and it says that it is applying them in the way that I want them to on
the machine and user against which I ran the test. I went in to the
Local Policy and it has picked up the settings. But when I try to
change there password it lets me do it with less characters that
required, it is not picking up the history of old passwords, and it
isn't enforcing complexity. I really don't understand this.

Please help!!

Jarryd

"Jarryd" <j@xxx> wrote in message
news:e8T1EbYWGHA.5012@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

I have created a Group Policy for remote users. The only settings I
have configured are the ones that pertain to passwords and account
lockout. I have moved those users to an OU that is linked to the new
GP, but the settings weren't taking affect. So I generated a report
and it came back saying the policy was empty. But that's just wrong.
If I go in and configure user settings those are picked up, but the
computer settings aren't. Why?

TIA,

Jarryd









.



Relevant Pages

  • Re: scripted logon
    ... Why can't you launch all the scripts from a Group Policy based Logon script. ... Here's the policy settings (I sure hope word wrap doesn't mess it up too ... Windows Components/Windows Installer ...
    (microsoft.public.windows.terminal_services)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... Server Security and Auditing Policy ... This list only includes links in the domain of the GPO. ... The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... > Server Security and Auditing Policy ... > This list only includes links in the domain of the GPO. ... > The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... >> Server Security and Auditing Policy ... >> The settings in this GPO can only apply to the following groups, users, ... >> Windows Firewall: Allow file and printer sharing exception Enabled ...
    (microsoft.public.win2000.group_policy)
  • Re: GP settings questions?
    ... I made a domain policy and all settings took ... Administering Group Policy by Using the Group Policy ... This newsgroup only focuses on SBS technical issues. ... you may want to contact Microsoft CSS directly. ...
    (microsoft.public.windows.server.sbs)