Re: Need help w/ group policy

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 05/16/04

  • Next message: Matt Hickman: "Re: cant redirect folders using gpo...feel like a tard" 
    Date: Sun, 16 May 2004 14:40:14 -0700

    Are the accounts logging in with domain rather than machine
    local credentials ?
    If with domain accounts, then set password policies in a GPO
    linked to the domain, if machine local accounts then set the
    policies in a GPO linked to an OU that contains the computers
    that they will log in at.
    After changing policies in AD make sure the client machines
    have refreshed (such as with reboot, as there can be a rather
    length time delay until this is done with periodic checking).
    Use RSoP or policy results capability of GPMC to determine
    what is the GPO source of then effective policies. 

    -- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCDBA,  MCSE W2k3+W2k+Nt4
"Daniel" <webmaster@nhscomputerclub.com> wrote in message 
news:4cadd7d3.0405160830.d93d8b8@posting.google.com...
>I have one server running windows server 2003 and I can't get the
> policy to work right.  I added 25 users then made all their passwords
> be nothing and then I told them to change there passwords at the next
> login.  I want to now be abl  to make them change the password to
> something more then 7 digits and with the complexity enabled.  But
> when I change it both in the default domain security policy and in the
> default domain controller policy they can still login and then change
> there password to anything including no password.  How do I do this?
  • Next message: Matt Hickman: "Re: cant redirect folders using gpo...feel like a tard"

    Relevant Pages

    • RE: Group Policy: multiple password policies in the same domain?
      ... Subject: Group Policy: multiple password policies in the same ... service accounts, and our company must be SAS70 type-II certified. ...
      (Focus-Microsoft)
    • Re: Local GPO refreshes outside of refresh interval
      ... I looked through my GPO's Windows Settings section ... > Some policies, including IE policies, have a checkbox that defines if this ... > it should apply EVEN if the value defined in GPO did not change since the ... we are talking about one particular policy: ...
      (microsoft.public.windows.group_policy)
    • RE: Group Policy: multiple password policies in the same domain?
      ... Why would you ever want different password policies for different ... accounts with strong passwords. ... Subject: Group Policy: multiple password policies in the same ... On my DC, running GPMC, if I do a GPO model with conflicting policies, ...
      (Focus-Microsoft)
    • RE: Group Policy: multiple password policies in the same domain?
      ... > it under access to the GPO. ... The conflict only happens when both policies ... results in having the policy denied. ... > user accounts it affects be able to read it and have "apply ...
      (Focus-Microsoft)
    • Re: Domain password policy problems
      ... password policies within a single domain. ... Password Policy done right ... If a GPO linked at the domain level applies to all accounts and Gpos ...
      (microsoft.public.windows.group_policy)