Re: password policy

There is not an option to disable the policy. There is only an option to
undefine.

--
alexo


"Steven L Umbach" wrote:

> You have to disable or change the policy at the domain level for domain
> users. Never "undefine" a password policy setting. Always set it to exactly
> what you want. Often a setting of zero will disable the policy if there is
> not specific enable/disable option. After you are done either wait at least
> five minutes or use secedit to refresh security policy on the domain
> controller and run the command net accounts to see the new effective
> passwrods policy. --- Steve
>
>
> "alexo" <alexo@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:B0047A9D-A349-4BBF-BF36-2880A6A806DF@xxxxxxxxxxxxxxxx
> >I enabled a group policy to force users to change their passwords every 180
> > days. Management asked me to disable the policy so I did. Users are
> > still
> > prompted every 180 days to change their passwords. I disabled the policy
> > at
> > the OU level and at the domain level. What am I missing?
> > --
> > alexo
>
>
>
.

Relevant Pages

  • Re: Domain
    ... Domain Controller Security Policy has all user rights assignments ... Configuring ipsec policy at the domain level ...
    (microsoft.public.win2000.group_policy)
  • Re: Security hierarchy
    ... policy level also. ... >>can be configured only at domain level. ... Try running security configuration and ... >>try not to change domain and domain controller policy, ...
    (microsoft.public.win2000.security)
  • Re: Login Scripts
    ... Default Domain Policy) that contains the "baseline" settings that users ... at the OU level will override settings declared at the domain level, and GPO ... > domain if no MSI package is found. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account Lockout Threshold change - Not taking effect
    ... The other policy is linked at the domain level. ... I even changed the settings to 5 attempt. ... Have you tried unlinking the additional GPO you've created at the Domain ...
    (microsoft.public.windows.server.active_directory)
  • Re: Security hierarchy
    ... OK - last night I managed to reset the password policy. ... I had to boot into DS restore mode in order to be able to access the ... New users had to have complex passwords. ... >> I have tried all the suggestions plus a new top GPO at domain level ...
    (microsoft.public.win2000.security)