Re: Password Restrictions

If you want to enfore password restrictions for domain accounts, then you
should link the GPO at the domain level - or edit settings in "Default
Domain Policy" GPO.

Any password settings in the GPOs applied at the OU level will affect only
local accounts on the computers located under that OU.

--
Dmitry Korolyov [d__k@xxxxxxxxxxxxxxxxxxxxxx]
MVP: Windows Server - Directory Services


"Preacher Man" <nospam> wrote in message
news:eB$j6fNfFHA.2384@xxxxxxxxxxxxxxxxxxxxxxx
>I am having trouble getting a GPO that I created today to give me the
> desired results. My server is a Win2K and the workstation is a WinXP.
> The
> GPO I created defines some Account policies. The trouble I am having is
> with the enforce password complexity rule. I run gpedit.msc on the XP
> machine and it shows the correct GPO settings but when I go to the server
> and force user to change password at next logon, it ask me to change but
> it
> does not enforce the rules. Does anyone have any idea on this?
>
> Thanks,
> Preacher Man
>


.

Relevant Pages

  • Re: Which Settings MUST be assigned to a User?
    ... specifically applied only to user accounts or computer accounts. ... HKEY_LOCAL_MASHINE values and user configuration modiefies the ... the settings in the User Configuration part ... GPO, with User Configuration settings in it, is applied. ...
    (microsoft.public.windows.group_policy)
  • Re: Proxy Settings
    ... A GPO is logically made up of two sections - Computer Configuration and User ... Settings under User Configuration affect user accounts the ...
    (microsoft.public.win2000.active_directory)
  • Re: Using GPO to implement Password Policy
    ... I created a new Group Policy Object, Company Password Policy, ... this GPO to a test OU, ... note that the user account settings itself are set to "Password never ... All of my domain accounts are set with these settings for their ...
    (microsoft.public.windows.server.active_directory)
  • Re: New to Active Directory - we need help configuring GPO
    ... setting at the domain level would affect ALL objects domain wide, ... involve numerous GPO filtering for the objects ... If you don't want your admins ... Password settings and password policies will ONLY work at the Domain ...
    (microsoft.public.win2000.active_directory)
  • Re: cant override screen saver policy
    ... Do you have any policy later in the precedence that says Loopback Processing ... >> Settings in the User Configuration part of a GPO always apply to User ... >> Accounts, not Computer Accounts, so any User Configuration settings you ...
    (microsoft.public.win2000.group_policy)
Loading