Re: Strong password policy not applying?

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: James (jamesb_at_buggeroffspam.opsisltd.co.uk)
Date: 06/18/04 

Date: Fri, 18 Jun 2004 11:49:10 +0100

"Steven L Umbach" <n9rou@nscomcast.net> wrote in message
news:l3lAc.69670$Sw.32935@attbi_s51...
> Password policy for domain users can only be applied at domain level and
> there are no exceptions - think of it as having a built in no override.
You
> can configure the policy at the OU level, but it will apply to only
"local"
> user accounts on computers in that OU. --- Steve

I'm with you - seems to work ok now. I was going to do that anyway, I was
just hoping to test it on a subset first but not to worry!
James

Relevant Pages

  • Re: Password Policy & Complexity
    ... There is only one password policy for domain users in a ... domain and that is at the domain level in Domain Security Policy by default. ... password policy at the top GPO in the list and set complexity to disabled there. ... > I have reset all password policies to either being ...
    (microsoft.public.win2000.security)
  • Re: To those who designed Group Policy in Active Directory
    ... > policy(applied at domain level) and the strict password policy (applied to ... > the OU) were applying to that computer account. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Where to set the domain password policy up?
    ... Account Policies applied to Domain Controllers apply to all accounts stored on domain controllers - that is, to all domain accounts in that domain! ... I'd say apply at the domain level still - to have consistent policy for domain accounts in the domain as well as for local accounts on all computers in that domain. ... > Is it better to set a domain password policy up at the domain node level ...
    (microsoft.public.windows.server.active_directory)
  • Re: Changing Time Issue / Password Question
    ... You can't set password policy at the OU level, it can only be set at the domain level and will impact all accounts in the domain. ... Reset the main Domain GPO password policy not to be complex did a gpupdate /force and then I was able to have a lower case password in a seperate OU. ... I uncheck the box to automatically adjust clock for daylight savings time because on Saturday night I do not want to the clock to change. ... So I created a GPO and set it not to inherit and did a gpupdate /force but it still makes me create a complex password with upper and lower case for this one user account? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Minimum password lenght GPO setting
    ... Without at least 2008 functional levels you are only able to set a password policy on domain level in Active directory. ... policy have on users as I have enabled it but clients are all logging ...
    (microsoft.public.windows.server.active_directory)