Re: Group Policy question...

From: Herb Martin (news_at_LearnQuick.com)
Date: 07/21/04 

Date: Wed, 21 Jul 2004 01:50:00 -0500

"Sunnie" <Sunnie@discussions.microsoft.com> wrote in message
news:8955C95D-B370-4DF8-94AF-3EFBBB999022@microsoft.com...
> I have a question on group policies.I have created an OU that contains
only our IT department. I added a group policy for passwords, and I linked
the OU to this policy.

Password Policies (and everthing in Security\Account Policies, i.e.,
Lockout and Kerberos) are PER DOMAIN policies and have no
effect on domain logins unless linked to the Domain.

Actually you "linked the GPO to the OU" (not the other
way around.)

>I also added our IT group under the security filtering box. This password
policy is set to enforce a password change - minimum days is 1, and maximum
days is set to 5 (just for testing purposes). I enforced the group policy,
but none of us have been warned of our passwords expiring or to change it.

> This is the first policy we are trying to put in place, but I cannot
figure out what is wrong. I have read everything there is to read on group
policies.there are no other policies that could be interfering.I checked the
no override, and everyone has read and apply group policy rights.

Domain only policy.

> Any idea what step I'm missing? Your assistance would be greatly
appreciated!! 

-- 
Herb Martin
>
> Thanks in advance
>

Relevant Pages

  • Re: Passwords in Server 2003
    ... Thanks for the reply on how to sort the passwords out. ... and domain.local policies wil display ... > select group policy object ... > in Group policy object editor ...
    (microsoft.public.windows.server.active_directory)
  • Re: Passwords Expire Too Fast
    ... I'd suggest to download the Group Policy Management Console, ... This will run through all the group policies and show you the ... Exchange/OWA, so if passwords are expiring every 40 days, it must be defined ...
    (microsoft.public.exchange.admin)
  • Re: Passwords Expire Too Fast
    ... PS. Ben thanks a ton for opening my eyes to the Group Policy Results Wizard, ... This will run through all the group policies and show you the ... Exchange/OWA, so if passwords are expiring every 40 days, it must be defined ...
    (microsoft.public.exchange.admin)
  • Re: Boy, did I screw up some Group Policies!
    ... Create a new Group Policy for each set of policies you want to enforce. ... (There follows a number of specific policies set under Administrative Templates in the Group Editor.) ... I did all this work from the Domain Controller console, logged in under the Domain Administrator account. ... Now I'm a security novice, so it made no sense to me that after I made these changes, when I logged into a workstation as the Domain Controller, I had no Task bar context menu and no Control Panel. ...
    (microsoft.public.win2000.group_policy)
  • Re: password to expire in 2 days ... will laptop be inexcessable?
    ... This will reveal my general ignorance concerning Group Policy, ... Pro stand-alone (i.e. workgroup) box, the "password age" policy is not ... In Group Policies, none of the various settings is enabled. ...
    (microsoft.public.windowsxp.general)