Re: Possible Bad Question

From: Neil (neilmcse_at_nospamforyou.com)
Date: 04/02/04


Date: Fri, 02 Apr 2004 13:18:30 -0800


"TechGeekPro" <%username%@yahoo.com> wrote in
news:OT5OwXPGEHA.3940@tk2msftngp13.phx.gbl:

> Ok, that's what I thought. Now, just to throw in a monkey wrench, the
> question states that the Local Policy locks her out after 3 attempts
> and the Default Domain Controllers policy locks her out after 2
> attempts. Their answer states that the two policies "cumulatively
> allow her five bad logon attempts". Even if it were the DD GPO and not
> the DDC GPO, wouldn't the Domain policy OVERRIDE the Local policy?
>
> --
> I may not be fully certified, but I am fully certifiable.
>
> "Neil" <neilmcse@nospamforyou.com> wrote in message
> news:Xns94BFA11D59452neilmcsehotmailcom@207.46.248.16...
>> "TechGeekPro" <%username%@yahoo.com> wrote in news:#mFrWFPGEHA.3188
>> @TK2MSFTNGP10.phx.gbl:
>>
>> <remarkable amount of snipage>
>>
>> So have you worked it out yet? The question is flawed because they
>> gave
> you
>> the DDC GPO settings not DD GPO settings. If they had given you DD
>> settings, these would be applied when you log onto the domain
>> (regardless of OU or Local setting). The local settings are only in
>> effect when
> logging
>> on to the local computer. way you go....
>>
>> Neil
>> "you'd do what, to who, for how many biscuits?"
>
>
>

ya, that was just stupid. DD GPO in play when logging on to Domain, Local
settings when logging on locally. Conflicting policies otherwise are
Local overwritten by site overwriten by Domain overwritten by OU...

Password policies are unique

-- 
Neil
"you'd do what, to who, for how many biscuits?"


Relevant Pages

  • Re: Possible Bad Question
    ... > question states that the Local Policy locks her out after 3 attempts ... > the DDC GPO, wouldn't the Domain policy OVERRIDE the Local policy? ... >> the DDC GPO settings not DD GPO settings. ...
    (microsoft.public.cert.exam.mcse)
  • Re: Deploy a local policy
    ... Get a GPO defined and linked to your OU and write of its ... by being innovative or by visiting 600 machines. ... being controlled by AD based GPO policy settings. ... > I need to change the local policy of all my computers in my domain. ...
    (microsoft.public.win2000.security)
  • Re: Possible Bad Question
    ... Default Domain Controllers policy locks her out after 2 attempts. ... Even if it were the DD GPO and not the DDC GPO, ... Domain policy OVERRIDE the Local policy? ... > the DDC GPO settings not DD GPO settings. ...
    (microsoft.public.cert.exam.mcsa)
  • Re: Possible Bad Question
    ... Default Domain Controllers policy locks her out after 2 attempts. ... Even if it were the DD GPO and not the DDC GPO, ... Domain policy OVERRIDE the Local policy? ... > the DDC GPO settings not DD GPO settings. ...
    (microsoft.public.cert.exam.mcse)
  • Re: local gp vs domain based gp
    ... which may be set for a domain or OU linked GPO ... local policy would be effective only if the AD ... OU/domain/site-linked GPO doesn't apply) would the local policy then be ... effect if there were no conflicts with GPO based settings. ...
    (microsoft.public.windows.group_policy)