Re: Default Domain password policy issue

Only informational events that indicate Group Policy has been applied
successfully. I checked for well before the period when changing the policy,
no errors from SCECLI posted. Only informational.

Btw, if I check gpedit, or run RSoP applied to my desktop, it also shows
password complexity as being enabled. It has me baffled!

"Darren Mar-Elia (MVP)" wrote:

Are you getting any errors on those DCs in the application event logs from a
source SCECLI?

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
Check out http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related
And, the Windows Group Policy Guide is out from Microsoft Press!!! Check it
out at http://www.microsoft.com/mspress/books/8763.asp
GPOGUY Blog: http://blogs.dirteam.com/blogs/gpoguy



"rb97685" <rb97685@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F81ADA08-55F8-43BE-B1FA-829B17BA6F14@xxxxxxxxxxxxxxxx
I tested the policy with a password change on my own desktop, and was able
to
change to a simple password. That is what prompted further investigation.

I need to amend what I had stated earlier. BOTH DCs show the old policy
settings when running gpedit.msc (local policy) from Run. But, when you
check
DDP, password complexity has been applied. We do not have any password
policy
configured through Default Domain Controllers either.

"Darren Mar-Elia (MVP)" wrote:

So, are you saying that when a domain user logs into a desktop, they are
not
required to enter a complex password? Or, is the problem just that you
aren't seeing what you expect to see on a DC?

Darren

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
Check out http://www.gpoguy.com -- The Windows Group Policy Information
Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related
And, the Windows Group Policy Guide is out from Microsoft Press!!! Check
it
out at http://www.microsoft.com/mspress/books/8763.asp
GPOGUY Blog: http://blogs.dirteam.com/blogs/gpoguy



"rb97685" <rb97685@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:00FED3EB-1B1A-4670-BE3D-AD7D9FD85ABA@xxxxxxxxxxxxxxxx
We're having a problem where we have enabled password complexity
requirements
at the Default Domain policy level in our organization. Upon testing,
it
looks as if this policy is not being applied to many of our desktops.
Here's
are scenario:

* 2 Domain Controllers (Windows Server 2003)
* Primarily XP desktops

* I logged into one of our domain controllers, ran gpupdate, then
opened
up
gpedit.msc. The old, simple password policy appears cached on this
machine.
Settings are grayed out, cannot be changed from the console directly.
* From my client machine, I opened up the GPMC snap-in, connected to
both
DCs and reviewed policy settings. Both show as the new settings as
having
been applied.
* While connected via GPMC to the DC in question, I changed settings,
applied. The re-applied password complexity.
* Logged back onto DC console, checked gpedit. Old policy is still
cached.

Anybody know what is going on here, and how do I get rid of this
apparently
cached policy on this one DC? Thanks






.

Relevant Pages

  • Re: Parts of GPO not working.
    ... If your users use other browsers like firefox from an usb stick/drive or whatever medium your policy will not help. ... I have a request that all of those computers not have Internet ... The settings in this GPO can only apply to the following groups, ... Group Policy refresh interval for computers Enabled ...
    (microsoft.public.windows.server.active_directory)
  • Parts of GPO not working.
    ... I have a request that all of those computers not have Internet ... The settings in this GPO can only apply to the following groups, ... Group Policy refresh interval for computers Enabled ...
    (microsoft.public.windows.server.active_directory)
  • Re: WMI missing security settings
    ... I believe the RSoP_x WMI settings will only account for the group ... security policy instead of the local policy. ... "Using SECEDIT to Force a Group Policy Refresh Immediately" ... Technically speaking, the items under "Security ...
    (microsoft.public.platformsdk.security)
  • Re: Intermittant GPO failure to apply
    ... If you have backup your group policy before, you can restore it from the ... 244474 How to force Kerberos to use TCP instead of UDP in Windows Server ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Set GPO for specific user group
    ... Click on the domain name in Group Policy Management, select the GPO and then click the arrow to the left to move it to the top of the list ... Filtering: Denied ...
    (microsoft.public.windows.server.sbs)