Re: User password group policy

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

"dray" wrote:
> Okay, we are running Server 2003 with about 100 users. Fresh
> install with no
> customization except the following. We disabled the Default
> Domain Policy
> and broke it up into smaller policies.
>
> One of the policies is a Password Group Policy. The only
> thing this is
> configured for is to handel the password configuration.
>
> The time has just rolled arouond for users to change their
> password for the
> first time. When they are prompted to change their password,
> it says that it
> was changed successfully. The next day when they log on it
> will only accept
> the old password. The password change they made the previous
> day did not
> take effect.
>
> Also, If I do a ctl+alt+del and pick change password no matter
> what I put in
> for the new password it will tell me that the password has
> already been used.
> This is the first time changing passwords on the new system,
> so I know that
> the passwords are unique.
>
> Any idea o what is messing up the passwords?

Hi,

>>customization except the following. We disabled the Default Domain
>>Policy and broke it up into smaller policies.

1 Can you explain more what you did and to which containers the
smaller GPOs have been linked?
2 Can you also explain why you did this?

Cheers
#JORGE#

--
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Active-Directory-User-password-group-policy-ftopict548604.html
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1736589
.

Relevant Pages

  • Re: group policy in DC
    ... Howdy Frodo! ... Password policies must be linked at domain level (or edited in the Default Domain Policy) to take effect. ... If you are running Windows Server 2003 and messed around with Default Domain Policy and/or Default Domain Controller Policy, you could have a look with dcgpofix.exe. ...
    (microsoft.public.win2000.group_policy)
  • Re: EventID 1054 from Userenv for startup script
    ... if Default Domain Policy shows as being the higest number on the ... Just above the bottom one would be any Site policies if they existed. ... Default Domain Policy is applied second to last, ... the deployment GPO will run at next reboot. ...
    (microsoft.public.windows.group_policy)
  • Re: GPO Problem
    ... Sorry for the confusion - the "Default Domain Policy" is applied at the ... The WSUS and SUS policies have been applied to certain OU's. ...
    (microsoft.public.windows.server.active_directory)
  • Re: group policy in DC
    ... The password complexity is - like *all* password policies a special case. ... Password policies must be linked at domain level (or edited in the Default ... Domain Policy) to take effect. ... messed around with Default Domain Policy and/or Default Domain Controller ...
    (microsoft.public.win2000.group_policy)
  • Re: SBS 2008 - "Exchange E-Mail address policy cannot be configured"...
    ... I verified all of that and do not see any policies that would cause ... Check Exchange 2003 policies" part of the following SBS ... " The Exchange E-mail address policy cannot be configured. ... ONLY Mailbox Manager policies and do not define e-mail addresses ...
    (microsoft.public.windows.server.sbs)