Re: Group Policy

Hi,

yes, a new password policies was added in a new OU for a group of computers,
but somehow that policy doesn't take effect on those computers although
GPRESULT has shown that GP was applied.

I set the policy setting to "DISABLED" for the policy named "Password must
meet complexity requirements". Does that mean "Password NEED NOT meet
complexity requirements"??



"Miha Pihler [MVP]" wrote:

Hi,

In a domain -- there can be only one password (account) policy and this one
policy is applied at domain level. While you can add additional password
policies and apply them to e.g. OU it will only apply to local accounts on
computers in that OU. This policy will _not_ have any effect on domain user
accounts.

Account and local policies
http://technet2.microsoft.com/WindowsServer/en/Library/04d8f32b-8ec7-4176-9d09-29f8c062d2391033.mspx

--
Mike
Microsoft MVP - Windows Security

"Lim WF" <Lim WF@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:CE93C6D9-12B7-43FA-A273-E57E5D642B15@xxxxxxxxxxxxxxxx
I have disabled the policy of 'Password must meet complexity requirements'
in my OU Group Policy. And I realize that GP has been successfully
applied
onto my XP client from GPRESULT. However, the Local Policy Setting in the
my
XP client doesn't show this policy is disabled, complexity password still
required when I create local user account. Please help... Thank you.




.

Relevant Pages

  • Re: Reinstall everytime assigned applications through GPO on start
    ... Software installation extension has been called for background policy refresh ... Stations - R&D Software (EMEA computers). ... Stations - R&D Software (EMEA computers) is set for installation because it ... The assignment of application Remote Administrator v2.1 from policy Software ...
    (microsoft.public.windows.group_policy)
  • Re: WK2 AD Security
    ... Well the link I referred to should be a good start on account policy but ... guest account is disabled on the domain controller in AD Users and Computers ... -- Create a password policy suitable for your needs but consider enabling ... network" setting on the domain controller or in DC Security Policy. ...
    (microsoft.public.win2000.security)
  • Re: Group Policies - not working?
    ... Ste ... make sure that the 'Domain Computers' security group has read & ... I am pretty sure I created the policy in the Active ... |>> Apply the policies from Active Directory Users and Computers. ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Group Policies - not working?
    ... make sure that the 'Domain Computers' security group has read & apply ... I am pretty sure I created the policy in the Active ... >> Apply the policies from Active Directory Users and Computers. ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Password policy, no override
    ... DCs will ignore any password policies you set at the domain controller ... I would disagree with setting the password policy on the Default ... > account and not the Domain user account object). ...
    (microsoft.public.win2000.active_directory)