Re: Can I have multiple password policies?

There are some more details on the Windows Server 2007 Password policies at http://msmvps.com/blogs/ulfbsimonweidner/archive/2007/03/12/windows-server-quot-longhorn-quot-granular-password-settings.aspx - nice blog and interesting.


"Brian Komar [MVP]" <bkomar@xxxxxxxxxxxxxxxxx> wrote in message news:MPG.20686fc830c276ad9896bb@xxxxxxxxxxxxxxxxxxxxxxx
In article <1174281452.269464.105260
@p15g2000hsd.googlegroups.com>, cateyed@xxxxxxxxx
says...
Hi there,

I'm trying to find out whether or not I can have 2 password policies
on Windows Server 2003 Standard.

I have the default domain policy, which is fantastic, but I need to
change this policy for a couple of users ONLY.

I have moved these users into their own OU and created a new GPO, but
it doesn't appear to change anything for them. I've removed the
inheritance for the Default Domain Policy from this OU, and Enforced
this new policy for this OU, but still, nothing.

I'm reasonably sure that I have the policy permissions correct, so I
was wondering if perhaps I couldn't have 2 different password policies
on the domain?? I've tried to read up on this but my M$ books don't
touch on this at all.

Any thoughts?

Thanks,

Max


For Windows Server 2003 and earlier, this means two
separate domains. Longhorn will allow separate password
policies within a single domain
Brian

.

Relevant Pages

  • Re: Can I have multiple password policies?
    ... I'm trying to find out whether or not I can have 2 password policies ... I have the default domain policy, which is fantastic, but I need to ... For Windows Server 2003 and earlier, ... separate domains. ...
    (microsoft.public.windows.server.security)
  • Re: Password Policies
    ... password policies and lockout policies have to be applied ... The ability to apply them more granularly is a new feature in ... Windows Server 2008. ... policy for a specific set of users. ...
    (microsoft.public.windows.server.sbs)
  • RE: Group Policy: multiple password policies in the same domain?
    ... I'd suspected that you might be able to use a different GPO at the same level but having never tested it I didn't want to committ it to writing! ... Subject: Group Policy: multiple password policies in the same ... You can only affect domain> accounts at the domain level, but you do NOT have to use the> "Default Domain Policy" GPO. ...
    (Focus-Microsoft)
  • Re: Local setting vs. Effective setting w/ GP??
    ... Password policies do not override local policies. ... >>> local policy affects local account meanwhile domain policy affects domain>> accounts. ...
    (microsoft.public.win2000.active_directory)
  • Re: ADAm password policies
    ... Thanks to you & Lee. ... password policies ... This difference means I might have to write that policy into the ... My sense so far in working with ADAM is that MS has not divorced it well ...
    (microsoft.public.windows.server.active_directory)