Re: Password complexity policy not being enforced

From: Hank Arnold (rasilon_at_aol.com)
Date: 09/22/04 

Date: Wed, 22 Sep 2004 16:22:55 -0400

This is just too wierd!!

I got there using your method (Start | Programs | Administrative Tools). I
get the expected items, but they are "undefined". If I go there using the
method I used before (from the AD Users and Computers console), I see the
settings I changed them to!! Why am I seeing different Security Settings??

To make things worse, If I go to my second DC using the Domain Security
Policy. I get the settings I see when I go through the AD Users and
Computers console!!

User can still specify "un-complex" passwords and account is not locked out.

Help! What is going on???

Hank

"Cary Shultz [A.D. MVP]" <cwshultz@mvps.org> wrote in message
news:%23EAGtcNoEHA.536@TK2MSFTNGP11.phx.gbl...
> Well, I am actually referring to the Domain Security Policy. If you go to
> you will see that there are many
> things. One of which is the Domain Security Policy. I like to use that
> one. You are correct, though, in that it is effectively the Security
> settings...

Relevant Pages

  • Re: Which overrides? AD or Domain Security Policy?
    ... It is set on the userAccountControl attribute of user objects. ... This will override the domain security account settings. ... >>> So, if I enable the password requirements in Domain Security policy, ...
    (microsoft.public.windows.server.active_directory)
  • Windows2000 Domain Security Policy problem, changes revert back after 1 hour!?!
    ... I have quite a frustrating problem with the Default Domain Security ... Policy in my Active Directory domain. ... account lockout settings and I'd like to get rid of them. ... chars and password complexity + account lockout settings are disabled. ...
    (microsoft.public.win2000.security)
  • Re: Which overrides? AD or Domain Security Policy?
    ... Will the individual user account settings override the Domain Security ... So, if I enable the password requirements in Domain Security policy, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Which overrides? AD or Domain Security Policy?
    ... Will the individual user account settings override the Domain Security ... So, if I enable the password requirements in Domain Security policy, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Cannot Add Users
    ... Specify the exact settings you want in Domain Security Policy and that ... settings you saw to undefined but instead define them to what you need - ... domain security settings and DC security settings I cannot add a user as I ...
    (microsoft.public.windows.server.security)
Loading