Re: Group policy-information stored

From: Derek Melber [MVP] (derekm_at_braincore.net)
Date: 03/15/04


Date: Mon, 15 Mar 2004 10:41:40 -0700

How many domains do you have?

-- 
Derek Melber
BrainCore.Net
derekm@braincore.net
"Boris Kocar" <boris.kocar@prva.net> wrote in message
news:OPun8%23oCEHA.596@TK2MSFTNGP12.phx.gbl...
> Thanks for you answer,b ut it didn't helped me.
>
> If I run net accounts /domain i got this out
>
> Force user logoff how long after time expires?:       0
> Minimum password age (days):                          2
> Maximum password age (days):                          999
> Minimum password length:                              0
> Length of password history maintained:                None
> Lockout threshold:                                    5
> Lockout duration (minutes):                           30
> Lockout observation window (minutes):                 30
> Computer role:                                        PRIMARY
> The command completed successfully.
>
> And i disabled all this in domain policy.
>
> Do you have any other idea?
> "Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
> news:ufg5c.12321$KO3.47986@attbi_s02...
> > Change those settings in Domain Security Policy OR at the top level GPO
> for the
> > domain container if you have more than one GPO in the domain as shown in
> Active
> > Directory Users and Computers. Highlight the domain and select
> properties/Group
> > Policy to see the GPO's for the domain. You will find the settings in
> computer
> > configuration/security settings/account policies ... The domain level is
> the only
> > place account policies can be configured for domain accounts. Complex
> password
> > setting must not be undefined - set it to disabled if you want to
disable
> it. Also
> > make sure that "block inheritance" is not enabled on the domain
controller
> container
> > when you make changes to password policy. Gpresult [possibly with the /v
> switch] can
> > help track down policy problems and it will also show the last time a
> policy was
> > applied.  --- Steve
> >
> >
> > "Boris Kocar" <boris.kocar@prva.net> wrote in message
> > news:O6pr92mCEHA.1484@TK2MSFTNGP12.phx.gbl...
> > > Hello
> > >
> > > does enybody know where are the information of policy stored like
> maximum
> > > password age, password must meet complexity rule.
> > >
> > > And does anybody know how to disable Password complexity with dos
> command.
> > > Because i try it in Conttol panel->Administrative Tools->Domain
Security
> > > Policy
> > >
> > > And it doesn't won't to store the information.
> > >
> > > thanks
> > >
> > >
> >
> >
>
>


Relevant Pages

  • Re: GPO not picking up computer settings
    ... The user accounts are domain user accounts. ... I have removed the GPO that I ... had configured with the password settings. ... Default Domain Policy and the Default Domain Controllers Policy. ...
    (microsoft.public.windows.server.security)
  • Re: Group policy-information stored
    ... Force user logoff how long after time expires?: ... And i disabled all this in domain policy. ... > place account policies can be configured for domain accounts. ... password must meet complexity rule. ...
    (microsoft.public.win2000.group_policy)
  • Re: Default Domain Policy
    ... password settings are controlled by their Active Directory Group Policy ... If I have service accounts or dial up ...
    (microsoft.public.windows.server.active_directory)
  • Windows2000 Domain Security Policy problem, changes revert back after 1 hour!?!
    ... I have quite a frustrating problem with the Default Domain Security ... Policy in my Active Directory domain. ... account lockout settings and I'd like to get rid of them. ... chars and password complexity + account lockout settings are disabled. ...
    (microsoft.public.win2000.security)
  • Internet Explorer Maintenance Windows XP SP2
    ... I have a strange problem with Windows XP SP2 and a group policy which ... the policy. ... secure" set of restrictions these accounts do have local admin privs on our ... Proxy/homepage settings are not entered ...
    (microsoft.public.windows.group_policy)