Re: Group Policy

Yes, that is what use of Disabled should do, just as you are expecting.
Has the machine been rebooted ?
Are you sure that there are now overriding GPOs nullifying the setting
provided in the OU-linked GPO?

"Lim WF" <LimWF@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:7D08CD48-FC8A-450E-A6DD-7EADCADDDF5D@xxxxxxxxxxxxxxxx
Hi,

yes, a new password policies was added in a new OU for a group of
computers,
but somehow that policy doesn't take effect on those computers although
GPRESULT has shown that GP was applied.

I set the policy setting to "DISABLED" for the policy named "Password must
meet complexity requirements". Does that mean "Password NEED NOT meet
complexity requirements"??



"Miha Pihler [MVP]" wrote:

Hi,

In a domain -- there can be only one password (account) policy and this
one
policy is applied at domain level. While you can add additional password
policies and apply them to e.g. OU it will only apply to local accounts
on
computers in that OU. This policy will _not_ have any effect on domain
user
accounts.

Account and local policies
http://technet2.microsoft.com/WindowsServer/en/Library/04d8f32b-8ec7-4176-9d09-29f8c062d2391033.mspx

--
Mike
Microsoft MVP - Windows Security

"Lim WF" <Lim WF@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:CE93C6D9-12B7-43FA-A273-E57E5D642B15@xxxxxxxxxxxxxxxx
I have disabled the policy of 'Password must meet complexity
requirements'
in my OU Group Policy. And I realize that GP has been successfully
applied
onto my XP client from GPRESULT. However, the Local Policy Setting in
the
my
XP client doesn't show this policy is disabled, complexity password
still
required when I create local user account. Please help... Thank you.






.

Relevant Pages

  • Re: WK2 AD Security
    ... Well the link I referred to should be a good start on account policy but ... guest account is disabled on the domain controller in AD Users and Computers ... -- Create a password policy suitable for your needs but consider enabling ... network" setting on the domain controller or in DC Security Policy. ...
    (microsoft.public.win2000.security)
  • Re: GPO causing client security logs to fill?
    ... a virus in play. ... settings to be applied on your client workstations. ... Group Policy is a complex and often misunderstood beast. ... I modified the account ...
    (microsoft.public.windows.server.sbs)
  • Server 2008 Bug: Default Policy forces null-password accounts.
    ... Where useraccounts are created by way of a batchfile or script, ... Creates a new account with a null password. ... this is an application of the policy... ... password length AND complexity, ...
    (microsoft.public.windows.server.general)
  • Re: Applying GPO only to certain computers within an OU...........
    ... I suggest avoiding the complexity of attempting to manage the application of ... apply the Software distribution policy to that sub-OU and move the ... computers you want to have that GPO applied to into the new sub-OU. ...
    (microsoft.public.win2000.group_policy)
  • Re: The local policy of this system does not permit you to logon i
    ... Security policies were propagated with warning. ... Error 0x534 occurs when a user account in one or more Group Policy objects ... I have checked the security policies & the administrator profile is not ...
    (microsoft.public.windows.server.sbs)