Re: domain controller

From: Cary Shultz [A.D. MVP] (cwshultz_at_mvps.org)
Date: 09/29/04 

Date: Wed, 29 Sep 2004 12:39:59 -0400

It would have to be at the Domain level as the Password Policy is a domain
setting! Password Policies set at the OU level ( I normally do not mention
this as I have found that this causes too many problems and confusion ) do
not affect domain user account objects!

HTH,

Cary

"Thiago Zanolo Mainente - Jornal Regional" <zanolo2@hotmail.com> wrote in
message news:O7dJOshpEHA.3988@tk2msftngp13.phx.gbl...
> I never have seen it yet, but you has at your domain, or OU, a policy that
> requires strong passwords, with letters, numbers, and a predefinied number
> of characters.
> When you create a new user and add a password to it, this new password
does
> not match with your policies.
>
>
>
> "mohammed khalaf" <anonymous@discussions.microsoft.com> escreveu na
mensagem
> news:151c01c4a618$6f76d060$a601280a@phx.gbl...
> > Unable to create a user in the domain controller win 2000
> > server (and the error massage is:
> >
> > Windows connote properly create this user object, the most
> > likely cause that the domain or grope policy require a
> > password, and some times, the password does not meet the
> > password policy requirements
> >
>
>

Relevant Pages

  • Re: To those who designed Group Policy in Active Directory
    ... > policy(applied at domain level) and the strict password policy (applied to ... > the OU) were applying to that computer account. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Where to set the domain password policy up?
    ... Account Policies applied to Domain Controllers apply to all accounts stored on domain controllers - that is, to all domain accounts in that domain! ... I'd say apply at the domain level still - to have consistent policy for domain accounts in the domain as well as for local accounts on all computers in that domain. ... > Is it better to set a domain password policy up at the domain node level ...
    (microsoft.public.windows.server.active_directory)
  • Re: Changing Time Issue / Password Question
    ... You can't set password policy at the OU level, it can only be set at the domain level and will impact all accounts in the domain. ... Reset the main Domain GPO password policy not to be complex did a gpupdate /force and then I was able to have a lower case password in a seperate OU. ... I uncheck the box to automatically adjust clock for daylight savings time because on Saturday night I do not want to the clock to change. ... So I created a GPO and set it not to inherit and did a gpupdate /force but it still makes me create a complex password with upper and lower case for this one user account? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password Policy
    ... > The Password Policy is set at the Domain level and applies to all users. ... > absolutely no effect whatsoever on your domain user account objects. ... > I would be more interested in what shows up when you do a 'net accounts' ...
    (microsoft.public.win2000.group_policy)
  • Re: Minimum password lenght GPO setting
    ... Without at least 2008 functional levels you are only able to set a password policy on domain level in Active directory. ... policy have on users as I have enabled it but clients are all logging ...
    (microsoft.public.windows.server.active_directory)
Loading