Re: Password Policy

Account policies applied at the OU level only take affect when logging in
locally on a computer in that OU.

There may be third party app that can do this.

I was told their original thinking was if there are resources on a domain
sensitive enough to require strong account policies, creating a group of
users with a simple password policy would amount to MS allowing an admin to
create a security hole in their overall network design. They opted to
suggest you create another domain if you have the need for differing account
policies.

hth
DDS
"kiko" <kiko@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:27622057-8C94-47AA-A93D-7BC1CA3FC2C9@xxxxxxxxxxxxxxxx
Is it true that a 'password policy' can be applied only at the Domain
level?
And that creating an OU that would block the Domain 'Password Policy' for
some machines will NOT work?
Is this an all or nothing deal with 'Password Policies"? Meaning you can
either apply them and all machines get them or you dont apply them and no
one
gets them.

Thanks in advance


.

Relevant Pages

  • Re: Password Policy for remote users
    ... There is only one password policy per domain or per machine. ... accounts, and this or the highest priority GPO setting account policies ... Change remote users passowrd to more complex. ...
    (microsoft.public.security)
  • Re: Pro-passwords
    ... >Then go to Account Policies, Password Policy, then go to ... >age and change that to zero. ...
    (microsoft.public.windowsxp.general)
  • Re: Problems Changing Passwords
    ... Do you have minimum password age set in some policy? ... Account Policies -> Password Policy. ...
    (microsoft.public.win2000.security)
  • Re: Questions about domain password policies
    ... be staggered so as to avoid an overwhelming amount of support calls, ... can the new password policy be applied only to specific groups? ... 90 day maximum age for passwords, is he prompted to change his ... password") override account policies? ...
    (microsoft.public.windows.group_policy)
Loading