Re: Problems testiing GPO for password complexity on OU before changing default domain policy

From: Mike Aubert (mikenews2_at_2000trainers.com)
Date: 02/20/04 

Date: Thu, 19 Feb 2004 23:03:45 -0600

Hi Kirk,

Account policy must be set at the domain level to affect domain accounts. If
Account policy is set at the OU level it will only apply to the local
accounts on workstations affected by the policy.

Mike

------------------------------------------------------------------
Mike Aubert
MCSE, MCSD, MCDBA
mikenews2@2000trainers.com

Note the "news2" in my email address is temporary and may be changed in the
future, remove it to email me at my Permanente address.
This posting is provided "AS IS" with no warranties, and confers no rights.

"Kirk H." <anonymous@discussions.microsoft.com> wrote in message
news:B156325A-D970-4507-AB1C-0A6196DDA7A1@microsoft.com...
> I have a Win2k AD domain in native mode and want to test password
complexity on an OU before applying to the entire domain. The complex
password policy is applied when I logon to the local machine but not when I
logon with a domain user which is a member of the OU and security group
within that OU. The machine account is also a member of the OU and the
security group I created. How can I apply the policy to the domain account?
BTW machine is Win2k Pro.
>
> Thanks in advance,
>
> Kirk H.
>

Relevant Pages

  • Re: GPO causing client security logs to fill?
    ... a virus in play. ... settings to be applied on your client workstations. ... Group Policy is a complex and often misunderstood beast. ... I modified the account ...
    (microsoft.public.windows.server.sbs)
  • Re: The local policy of this system does not permit you to logon i
    ... Security policies were propagated with warning. ... Error 0x534 occurs when a user account in one or more Group Policy objects ... I have checked the security policies & the administrator profile is not ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO causing client security logs to fill?
    ... Unlink the Default Domain Controller Policy (As it was not previously ... settings to be applied on your client workstations. ... I modified the account ... So basically, the Account lockout threshold, account lockout ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO causing client security logs to fill?
    ... Possibly delete the Default Domoan Controller Policy (As it did not ... issues as it was about recoverying from a virus which appears to ... with client logon failures. ... I modified the account ...
    (microsoft.public.windows.server.sbs)
  • Re: Password expires for no apparent reason
    ... policy that has set the values to what you see below meaning that users ... So I would define the password age and configure a value in there. ... As Harj said Account lockouts could potentially be a problem as perhaps ... Password expires for no apparent reason ...
    (microsoft.public.windows.server.active_directory)
Loading