Re: Applying password policies

From: The Rock (anonymous_at_discussions.microsoft.com)
Date: 08/02/04 

Date: Mon, 2 Aug 2004 08:29:36 -0700

>From what I have read from Microsoft, Account Policies
which include the Password Policies can be applied to
OUs. If that is the case can't I remove the Password
Policies from the Domain Policy and apply them to all OUs? 

----
http://www.microsoft.com/resources/documentation/Windows/X
P/all/reskit/en-us/Default.asp?
url=/resources/documentation/windows/xp/all/reskit/en-
us/prdp_log_fann.asp
By default, all computers that are not-domain controllers 
will also receive the default domain account policy for 
their local accounts. However different account policies 
might be established for local accounts on computers that 
are not domain controllers by setting an account policy 
at the organizational unit level. Account policies for 
stand-alone computers can be set using Local Security 
Policy
----
>-----Original Message-----
>It is not going to work.   There can be only one 
password policy in a
>domain.  If you need two separate password policies then 
you need two
>separate Domains.  There is no getting around 
this....not really!
>
>Cary
>
>"The Rock" <anonymous@discussions.microsoft.com> wrote 
in message
>news:94b601c4789e$91432880$a301280a@phx.gbl...
>> I need help with Group Policy.  I need to apply two
>> different password policies in my domain and can't seem
>> to get it to work properly.  I need to know what is the
>> correct way and where to apply the two different 
password
>> polices?
>
>
>.
>

Relevant Pages

  • Re: Password policy, no override
    ... DCs will ignore any password policies you set at the domain controller ... I would disagree with setting the password policy on the Default ... > account and not the Domain user account object). ...
    (microsoft.public.win2000.active_directory)
  • Re: Cannot edit "Log on as a service" and "Allow log on locally" policies on W2K3 server.
    ... I am installing a new version of a program on my W2K3 SP1 server and one of the requirements is to create a "local" user account and grant this account ... However when I go into the Local Security Policy editor/Security settings/Local Policies/User Rights Assignment, I do not get the option to add or edit. ... These two policies both have different icons showing so I'm not sure what that indicates but am sure it has to do with why I cannot make any changes there. ... drill down to those settings and it'll tell you which policy is applying to those settings. ...
    (microsoft.public.windows.server.general)
  • Re: GPO configuration
    ... > account/password policy undefined and apply different OU ... > the domain level override OU level? ... I thought the lower GPO policies ... All domain controllers will get their Account ...
    (microsoft.public.cert.exam.mcse)
  • Re: Domain security Policy
    ... having issues with these security policy. ... unlocking the account and the customer satisfaction will hit badly. ... talks about the password policies instead of account lockout. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Lock Account/Logoff Time-out
    ... the newer newsgroup for group policy is ... The policies you seem to be using is are not Account Policies ... these settings apply to network logins onto the server ...
    (microsoft.public.security)
Loading