Re: Account policy works only at domain level

From: Corrado (test_at_me.com)
Date: 06/08/04 

Date: Tue, 8 Jun 2004 17:00:13 +0200

Thank you Steven,
so I can stop to make me crazy understanding this strange thing.

bye
Corrado

"Steven L Umbach" <n9rou@nospam-comcast.net> ha scritto nel messaggio
news:CPjxc.67949$Ly.62324@attbi_s01...
> That is by design and one of the few settings that do not work like other
GP
> settings. For domain users, account policy can only be configured at the
domain level
> with no workarounds. If you configure at the OU level it will however be
enforced on
> local user accounts for computers in that OU. -- Steve
>
>
>
> "Corrado" <test@me.com> wrote in message
> news:uH%23XFrVTEHA.3420@TK2MSFTNGP12.phx.gbl...
> > I've tried to create an account policy for limit password change limits
but
> > it works only if the policy is created at domain level (where also
Default
> > Domain Policy is present).
> > If I create the same policy at OU level, no setting is applied.
> >
> > We have a w2000 domain in mixed mode with one NT4 BDC running.
> >
> > Thanks
> > Corrado
> >
> >
>
>

Relevant Pages

  • Re: Kerberos User Ticket Lifetime
    ... I always wonder whether we can create 2 GPOs with diifferent account policy, ... groups to the appropriate GPO so that they will get the right settings. ... >> Maximum User Ticket Lifetime at a userid level, or only at the domain level ... >> with the Maximum User Ticket Lifetime parm? ...
    (microsoft.public.security)
  • password policy bypass on stand-alone system
    ... password on a stand-alone system even if the Security ... Settings - Account Policy - Password Settings are set for ... users from the Admin Tools, but does not work if you add ...
    (microsoft.public.win2000.security)
  • Re: Account policy works only at domain level
    ... How can i enforce on local user accounts for computers in that OU? ... > That is by design and one of the few settings that do not work like other ... account policy can only be configured at the ...
    (microsoft.public.win2000.group_policy)
  • Re: Win2K - Account Lockout Policy
    ... actually the lock out account policy is part of the account policy ... and the effective account policy must be set on the domain level not on the ... > A W2K client should be able to view the local security policy. ... > settings for the policy should come down from the domain controller. ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: VB6, variables in multi-forms
    ... using a class with initialize and/or terminate events. ... It's about setting up a basic sound design that works universally. ... We've agreed on the basis of using a class, and we've agreed on the basis that the property and Is Nothing checking is not significant overhead. ... So the differences are in the delay loading and making the settings autonomous. ...
    (microsoft.public.vb.general.discussion)