Re: Group policy-information stored

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 03/17/04 

Date: Wed, 17 Mar 2004 00:06:33 GMT

It might help if it you can post your computer configuration gpresult from a domain
controller. I would also run netdiag and dcdiag on your domain controller where you
configured the policy and look for any failed tests that may prove pertinent. Dcdiag
and netdiag are on the install cd in the support/tools folder where you need to run
the setup program. below is an example of gpresult output for computer configuration.
Domain account/password policy may not apply to local machine accounts for domain
machines. --- Steve

###############################################################
Last time Group Policy was applied: Tuesday, March 16, 2004 at 5:55:49 PM
Group Policy was applied from: server1-2000.umbach1.com
===============================================================
The computer received "Registry" settings from these GPOs:
        Local Group Policy
        Default Domain Policy
        Default Domain Controllers Policy
===============================================================
The computer received "Scripts" settings from these GPOs:
       Local Group Policy
===============================================================
The computer received "Security" settings from these GPOs:
        Local Group Policy
        Domain Main 1
        Default Domain Policy
        Default Domain Controllers Policy

"Boris Kocar" <boris.kocar@prva.net> wrote in message
news:OPun8%23oCEHA.596@TK2MSFTNGP12.phx.gbl...
> Thanks for you answer,b ut it didn't helped me.
>
> If I run net accounts /domain i got this out
>
> Force user logoff how long after time expires?: 0
> Minimum password age (days): 2
> Maximum password age (days): 999
> Minimum password length: 0
> Length of password history maintained: None
> Lockout threshold: 5
> Lockout duration (minutes): 30
> Lockout observation window (minutes): 30
> Computer role: PRIMARY
> The command completed successfully.
>
> And i disabled all this in domain policy.
>
> Do you have any other idea?
> "Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
> news:ufg5c.12321$KO3.47986@attbi_s02...
> > Change those settings in Domain Security Policy OR at the top level GPO
> for the
> > domain container if you have more than one GPO in the domain as shown in
> Active
> > Directory Users and Computers. Highlight the domain and select
> properties/Group
> > Policy to see the GPO's for the domain. You will find the settings in
> computer
> > configuration/security settings/account policies ... The domain level is
> the only
> > place account policies can be configured for domain accounts. Complex
> password
> > setting must not be undefined - set it to disabled if you want to disable
> it. Also
> > make sure that "block inheritance" is not enabled on the domain controller
> container
> > when you make changes to password policy. Gpresult [possibly with the /v
> switch] can
> > help track down policy problems and it will also show the last time a
> policy was
> > applied. --- Steve
> >
> >
> > "Boris Kocar" <boris.kocar@prva.net> wrote in message
> > news:O6pr92mCEHA.1484@TK2MSFTNGP12.phx.gbl...
> > > Hello
> > >
> > > does enybody know where are the information of policy stored like
> maximum
> > > password age, password must meet complexity rule.
> > >
> > > And does anybody know how to disable Password complexity with dos
> command.
> > > Because i try it in Conttol panel->Administrative Tools->Domain Security
> > > Policy
> > >
> > > And it doesn't won't to store the information.
> > >
> > > thanks
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: At this point, Im wondering if GPOs even work?
    ... what is set in a policy does not bubble up into the user interface. ... Pop-up Blocker" box on one and checked it on the other. ... ensured no GPOs nor local policy were superseding my Test GPO ... Config (so why do these settings even exist in Computer Config if they ...
    (microsoft.public.windows.group_policy)
  • Re: Changes to default Group Policy
    ... I am already using GPMC to manage GPOs. ... Policy and Default Domain Controllers Policy was first created? ... settings, I find comparing manually to be very time consuming. ... if there was a tool that I could use that would compare the default policies ...
    (microsoft.public.windows.group_policy)
  • Re: questions on group policy - OU vs local computer GP (gpedit.msc)
    ... When the machine boots up you get the message "applying computer settings" ... Policy, Site Policy, Domain Policy and the OU policy to find the machines ... Any group policy that have a Computer Configuration within ... The second phase of group policy is then when the user logs on and group ...
    (microsoft.public.win2000.group_policy)
  • Re: Group Policy
    ... Computer Configuration, Windows Setting, Security Settings, I only have ... Policy it should go out to the whole Domain. ... >> I have been trying to set up the Password Policy for a few days now, ...
    (microsoft.public.win2000.active_directory)
  • Re: Hang @ Applying Computer Settings/Applying Your Personal Setti
    ... each DC and they came back with all Passed or Policy OK. ... Group Policy was applied from: ... The user received "Registry" settings from these GPOs: ... The user received "Internet Explorer Branding" settings from these GPOs: ...
    (microsoft.public.windows.group_policy)
Loading