Re: Account policy works only at domain level

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 06/08/04 

Date: Tue, 08 Jun 2004 14:12:50 GMT

That is by design and one of the few settings that do not work like other GP
settings. For domain users, account policy can only be configured at the domain level
with no workarounds. If you configure at the OU level it will however be enforced on
local user accounts for computers in that OU. -- Steve

"Corrado" <test@me.com> wrote in message
news:uH%23XFrVTEHA.3420@TK2MSFTNGP12.phx.gbl...
> I've tried to create an account policy for limit password change limits but
> it works only if the policy is created at domain level (where also Default
> Domain Policy is present).
> If I create the same policy at OU level, no setting is applied.
>
> We have a w2000 domain in mixed mode with one NT4 BDC running.
>
> Thanks
> Corrado
>
>

Relevant Pages

  • Re: What the "Local Group Policy" definition?
    ... "Internet Explorer Maintenance Policy Processing" setting at the default ... thus the Local Group policy is winning. ... or will applying this at the domain level casue the Citrix Loopback ... settings can be a pain to get working right. ...
    (microsoft.public.windows.group_policy)
  • Re: GPO Password Policy Settings
    ... Sounds like you applied the account policy to the OU? ... The policy has the following settings: ... These are the only settings defined in this GPO object. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Security hierarchy
    ... can be configured only at domain level. ... would only apply to local machine accounts if domain policy is overridden.. ... I have found that sometimes certain settings do not "show up" in a timely ... > Currently Domain and DC Security policy have all display password ...
    (microsoft.public.win2000.security)
  • Re: Password Policy Not Applying??
    ... Florian Frommherz wrote: ... You need to apply the Password Policy on Domain Level. ... If you link a Policy with password settings at OU level (like you did ...
    (microsoft.public.windows.group_policy)
  • Re: GP not working under Container
    ... Do you want me to link to the Default Domain Policy? ... So, after you created a OU and put your users into it, you create a new GP with the settings you want the users in the newly created OU to have. ... You might want to create a new GP at domain level and make your settings there. ... Local Policies will be overwritten by site policies will be overwritten by domain policies that will be overwritten by OU specific policies, ...
    (microsoft.public.win2000.group_policy)