Re: A policy to override the default domain policy?

Tech-Archive recommends: Fix windows errors by optimizing your registry



Yes, if he has an overriding GPO set at the OU level for the server that
blocks the password policy he has set for his domain. This would only work
for local accounts though and might also override other domain level
settings he desires.

N

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Any opinions or policies stated within are my own and do not necessarily
constitute those of my employer. Use of included script samples are subject
to the terms specified at http://www.microsoft.com/info/cpyright.htm


"Andrew Mitchell" <amitchell@xxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:Xns962B9B69F5B5AAA12F32EDB83F@xxxxxxxxxxxxxxxx
> "Nick Finco [MSFT]" <nfinco@xxxxxxxxxxxxxxxxxxxx> said
>
>> Nope, you would need to remove the machine from the domain and use local
>> accounts. All domain accounts will use the domain password policy
>> uniformly.
>>
>
> If he's talking about IIS, wouldn't it be possible to login using machine
> \username instead of the domain username?
>
> --
>
> Andy.


.



Relevant Pages

  • RE: Group Policy: multiple password policies in the same domain?
    ... > Domain Wide Password policies cannot be blocked by OU ... Someone else mentioned that it would only affect local accounts (local ... whatever password policy the domain controllers were given would ...
    (Focus-Microsoft)
  • Re: Help on Account Lockout
    ... you can indeed set a password policy at the OU level. ... not affect your domain user account objects. ... accounts on any machines that might reside directly in that OU, ... All other definitions apply to the local accounts. ...
    (microsoft.public.win2000.active_directory)
  • Re: Help on Account Lockout
    ... password policy only apply to the local accounts in each computer, ... It will cost a little time to unlock the accounts. ... You can have only one password policy per domain. ... not affect your domain user account objects. ...
    (microsoft.public.win2000.active_directory)
  • Re: SOX compliant .. different password policy need for privil
    ... I am curious to know if once a forest and a root domain is created, ... have the password policy for the new ... match the existing domain, move all user accounts to the new domain, ... and keep the privileged accounts in the existing domain (after all ...
    (microsoft.public.win2000.active_directory)
  • Re: SOX compliant .. different password policy need for privil
    ... have the password policy for the new domain ... the password policy on the forest root domain to meet the SOX ... and force all administrative accounts to reset their passwords under the ... policy for all privilege accounts however our Win2003 forest consist ...
    (microsoft.public.win2000.active_directory)