RE: Domain Policy affects Local?

From: Danilo Bordini [MVP] (DaniloBordiniMVP_at_discussions.microsoft.com)
Date: 11/05/04 

Date: Fri, 5 Nov 2004 04:32:02 -0800

Tara,

By design, the local accounts in machines are affect only by policies
created in OU´s (organizations units).
The Default Domain Policy handle the domain accounts settings.
Verify if you have any policies to OU´s (you can use GPRESUL.exe) in
workstation to verify the policies applied.

Danilo Bordini

"Tara" wrote:

> We are planning to implement a password policy next week. I've already
> turned on a few parameters, such as a minimum length of 8. Now, it appears
> that policy is in effect for the local machine policy. We are planning to
> have users change their password every 90 days, but we don't want the policy
> to affect the local accounts or have the local admin password change. What
> am I missing?

Relevant Pages

  • Re: Password Expired
    ... Also verify that those clients are actually getting ... Please do not send e-mail directly to this alias. ... > And the old policy was set to 42 days. ... Verify that they are actually getting policies ...
    (microsoft.public.win2000.active_directory)
  • Re: password local policy in domain
    ... As long as the machine is domain member the Domain password policy is used. ... do not use local accounts. ... I understand domain policies overwrite local policies but it works ... so remote machine use this local user. ...
    (microsoft.public.win2000.group_policy)
  • Re: password length
    ... there can be only one account policy. ... local account policies can be different from the domain account policy, ... as when you define an account policy specifically for the local accounts. ...
    (microsoft.public.windows.server.setup)
  • Re: Minimum Password Length
    ... -Password Policies to AD accounts are applied at domain level. ... -You can use at OU level, but that policy will be only applied at local accounts on these machines. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Least User Priviledges for Network Administrators
    ... It makes sense to have a chain of command and approval policy to keep things ... the computer use policies, software purchasing policies, security ... upper management--both within the Network Technology group, ... driving the process of tightening down security. ...
    (microsoft.public.windowsxp.security_admin)