2003 Domain Password Policy on NT 4.0 Workstation

From: Rob Lowe (none)
Date: 02/11/04 

Date: Wed, 11 Feb 2004 17:56:46 -0600

Hi -

I have a client in th eprocess of migrating from Windows NT 4.0 SP6 with the
AD-aware client to Windows XP SP1.

We would like to apply a more stringent password policy to the domain to
force periodic password changes, retaining password history and requiring
complex passwords, but only to those users that have been migrated to
Windows XP since the new password policy will be discussed during training.

Since I don't want to apply a restrictive password policy to my users still
running Windows NT 4.0, would the following scenario work?

1. Modify the Default Domain Policy and remove the Account
Policies/Password Policy settings.
2. Create a new GPO object and define the Account Policies/Password Policy
settings in the new GPO object.
3. Define a security filter so that the GPO with defined Account
Policies/Password Policy settings is only processed by security group
containing user accounts that have been migrated to Windows XP.

If this scenario would work, should this GPO be linked before or after the
Default Domain Policy is processed?

Cheers!
-Rob

Relevant Pages

  • Re: 2003 Domain Password Policy with NT 4.0 Workstations
    ... The only way to exclude users from adhering to the domain password policy is ... > running Windows NT 4.0, so would the following scenario work? ... Modify the Default Domain Policy and remove the Account ...
    (microsoft.public.windows.server.active_directory)
  • About Group Policy
    ... I want to create my first user. ... Account Policy -> Password Policy" but failed to add again. ... I change the policy by running gpedit.msc "Computer Configuration -> Windows ...
    (microsoft.public.win2000.group_policy)
  • Default Domain Policy Disabled - is this normal?
    ... Hi all - I have just started at a company who utilise a Windows 2000 ... go to properties and then the group policy tab - default ... machines attached to the domain (the password policy requirements ...
    (microsoft.public.windows.group_policy)
  • Windows Shortcut Keys and "ALT+TAB" not working because of GPO
    ... We've got an issue with a machine policy which prohibits us of using Windows ... Deny access to this computer from the network Support_388945a0, ... Policy Setting ...
    (microsoft.public.de.german.windowsxp.gruppen.richtlinien)
  • Re: GP errors
    ... Then later shutdown second one and start the first one. ... machine (MTCCSAPROUTER) to the domain and those errors are not coming. ... The policy for which it is giving access denied error is the Default ... Windows cannot query for the list of Group Policy objects. ...
    (microsoft.public.windows.server.active_directory)