Re: GPO Password Policy Problem

From: Herb Martin (news_at_LearnQuick.com)
Date: 02/21/05 

Date: Mon, 21 Feb 2005 16:57:48 -0600

"cjc" <cjc@discussions.microsoft.com> wrote in message
news:63297677-D5D9-47D2-A5F3-AF7C0F558E55@microsoft.com...
> What event would cause GPO to be applied by the DCs?

5 minute default refresh (for DCs*)
...or reboot
...or manual refresh with secedit (on Win2000)
...(or GPUpdate on Win2003/XP)

Also: *90 minute default on workstations

Such refreshes do not (typically) update software but
only perform Security and Registry settings.

> "ptwilliams" wrote:
>
> > You can't just disable the GPO - you have to undo the policy setting.
> > Enable the GPO, and change the policy setting that requires password
> > complexity from enabled to disabled.
> >
> > The next time this GPO is applied by the DCs they will change the
attribute
> > that configures this option and the option will no longer be enforced.
You
> > can then disable the GPO if you like, although most if it won't be
applied
> > after it's applied originally. 

-- 
Herb Martin
> >
> >
> > -- 
> >
> > Paul Williams
> >
> > http://www.msresource.net/
> > http://forums.msresource.net/
> >
> > "cjc" <cjc@discussions.microsoft.com> wrote in message
> > news:5A6DB0EE-F453-4476-A6CA-93FF17FAFC57@microsoft.com...
> > A GPO was created to require password complexity requirements.  After
> > applying the GPO, the policy works.  However, I'm not ready to implement
it;
> > so, I decided to disable it.  With the GPO already disabled, the AD
still
> > demand the complexity requirement.  When I go to AD Users and Computers
and
> > reset password, it always asked for the complexity requirement.  Any
idea?
> >
> >
> >

Relevant Pages

  • Re: Group Policy refresh behavior
    ... GPO refresh happens at reboot, login, and in the background every 90 minutes ... (clock starts at boot for computer side background refresh. ... is it a fixed 90 minute schedule for all> machines in the domain, or is it variable depending on when a particular ...
    (microsoft.public.windows.group_policy)
  • Re: Auto Update
    ... not giving the computer enough time to refresh the ... >User object are in the same container as the GPO applies ... >gpresult shows that the policy isn't applied to the ... >> where the GPO is linked. ...
    (microsoft.public.win2000.group_policy)
  • Re: Custom ADM not resetting value
    ... GPO settings of any kind are not refreshed unless the GPO itself has ... during background refresh, which is every 90 minutes +- for workstations and ... The policy to enable this is ... > POLICY!!EnableAuth ...
    (microsoft.public.win2000.group_policy)
  • Re: Force GP update manually
    ... of the GPO are derived from the version numbers, ... way for something as regular as a GP refresh. ... > if you have to reset a DefDomPol or DefDomConPol ... > Mark Heitbrink - MVP Windows Server ...
    (microsoft.public.windows.group_policy)
  • Re: Can SP2 Firewall be configured with Login Script in AD?
    ... The machines will refresh their policies within hours. ... but is used to force refresh of that machine's ... To test the policy, use the following command once for each state (network ... >I used my XP SP2 machine created a new GPO in AD Users and Computers ...
    (microsoft.public.win2000.active_directory)