Re: How to apply password policies through GPO



Thank you guys, i had a feeling about this, and that's why i asked.

Now i have to talk to my boss to discuss which decision we will take in the
future.

Thanks a lot!

"ANIXIS" wrote:

Absolutely 100% sure. Microsoft does have a solution (password filter),
but you need to program it in C. Microsoft's other solution is to have
a separate domain.


Leonel wrote:
That's a good point. I didn't now that you can't apply a password policy to
single users. Are you completely sure??? The only ways are those you
explained to me??

Then if so, i don't know why Microsoft has not solve this situation, because
not always you need to apply a policy to the entire domain. I our case, we
can't do that, we have special users that cannot be modified by GPO's, this
would cause some applications not to run.


"ANIXIS" wrote:

Hello Leonel,

The Windows password policy applies to all domain users accounts and
cannot be linked to an OU. Your only options are to create another
domain for these users, write your own password filter, or purchase a
third-party product such as Password Policy Enforcer:
http://www.anixis.com/products/ppe/features.htm



Leonel wrote:
Hi everybody!

I'm using Windows 2003 sp1 to configure Group Policy for the first time.
What i'm trying to do is to enforce password policy through gpo rules only to
specific users in my domain. I do not want to apply that gpo to the entire
domain, so i've used the security filtering tab to select the security group
in the Active Directory through GPMC, also this GPO has been created in a OU
wich contains the user groups.

The problem is the GPO does not apply to the clients (XP sp2), and when i
ran the RSoP, i see my GPO in the deny GPO's with a value "empty" because of
the Security Filtering is denying the rule.

I have a lot of information of GPO's that i found over the internet and also
troubleshooting ways to solve the issue, but nothing works.

I will appreciate any help on this!!!

Thanks!




.



Relevant Pages

  • Re: GPO security settings not applied
    ... Domain Security Policy to set this. ... you can indeed set a password policy at the OU - level! ... >> Domain - Default Domain GPO ... User settings in the IT GPO (ex. ...
    (microsoft.public.win2000.group_policy)
  • Re: How to apply password policies through GPO
    ... The Windows password policy applies to all domain users accounts and ... third-party product such as Password Policy Enforcer: ... What i'm trying to do is to enforce password policy through gpo rules only to ... so i've used the security filtering tab to select the security group ...
    (microsoft.public.windows.group_policy)
  • Re: Group Policy Question
    ... You can not have a different password policy linked to each OU. ... >> domain user account objects that might be located in that OU. ... >> link the desired GPO to the correct OU. ... >> I might suggest that you check out the GPMC. ...
    (microsoft.public.windows.server.active_directory)
  • Group Policy Headache
    ... I just setup a new domain on a windows 2003 server. ... The problem im having is with the password policy part. ... Confirming GPO configuration. ... In domain controllers GPO also, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group Policy Question
    ... You can not have a different password policy linked to each OU. ... > domain user account objects that might be located in that OU. ... > link the desired GPO to the correct OU. ... > I might suggest that you check out the GPMC. ...
    (microsoft.public.windows.server.active_directory)