Re: Default Domain Policy - Password Policies not always applying correctly

Tech-Archive recommends: Fix windows errors by optimizing your registry



Hi Harj,

That looks promising. I'll do some tests. Thanks for finding that for me!

Regards,

Curtis.

--

"Harj" <cisqokid@xxxxxxxxx> wrote in message
news:1159815067.762520.21360@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi,

Look through this article as this could be the cause of the issue.

Description of the Windows XP Professional Fast Logon Optimization
feature
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q305293&SD=MSKB&;

You state that they are prompted to change their password after a
gupdate /force is performed. This would tell me that the policy is
either not applying correctly (not true as a gpupdate /force works), or
the policy is not applying during the logon process (fast logon
optimization during logon)

Good luck

Harj Singh
Password Policy done Right
www.specopssoft.com

Curtis Fray wrote:
Hi,

We've had an on going problem that I'm hoping someone may be able to shed
some light on. I have a Windows 2003 domain which contains XP
workstations.
All are up to date with service packs and security patches. The problem
some
users occasionally get is they log on to Windows and then find they can't
access any data. What we then find is their password has actually expired
but they've not been prompted to enter a new one. Our helpdesk get around
this by logging in as themselves and running "gpupdate /force". When the
user then logs on they're prompted to change their password.

This doesn't happen to everyone. The pattern generally seems to be if
it's a
user who's been away on holiday or off for a while, or using a computer
that
hasn't been turned on in a while.

Has anyone got any ideas what could be causing this and how to get around
it?

Thank you,

Curtis.
--
Please reply to news group only. Thank you.



.



Relevant Pages

  • Re: Default Domain Policy - Password Policies not always applying correctly
    ... Description of the Windows XP Professional Fast Logon Optimization ... This would tell me that the policy is ...
    (microsoft.public.win2000.group_policy)
  • Group policy only applied after restart
    ... I have a policy in IE7 to use our proxy and also not let the user change the ... I have tried gpupdate, ... Is the only way to get this policy to work is to restart? ... Windows XP SP2 ...
    (microsoft.public.win2000.active_directory)
  • Windows Shortcut Keys and "ALT+TAB" not working because of GPO
    ... We've got an issue with a machine policy which prohibits us of using Windows ... Deny access to this computer from the network Support_388945a0, ... Policy Setting ...
    (microsoft.public.de.german.windowsxp.gruppen.richtlinien)
  • Re: GP errors
    ... Then later shutdown second one and start the first one. ... machine (MTCCSAPROUTER) to the domain and those errors are not coming. ... The policy for which it is giving access denied error is the Default ... Windows cannot query for the list of Group Policy objects. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Important information about XP SP2 .ADM Files
    ... The Windows 2000 fix is available here: ... >> your attention to an important issue related to Group Policy. ... >> an important issue around the use of the .ADM files we ship with XP SP2. ...
    (microsoft.public.windows.group_policy)