Re: Password Policy Not Applying??

Tech-Archive recommends: Fix windows errors by optimizing your registry


Florian Frommherz wrote:
Howdy!

Halloween wrote:
Now, I have various other settings enabled, and all of these are taking
effect (both User and Computer Config settings). But the password
policies don't seem to be in place. On my test user, if I set their
account to change password at next logon, it asks them for a new
password, yet they can input anything they like, it does not challenge
them for not meeting the complexity requirements.

You need to apply the Password Policy on Domain Level. Create a new
Group Policy at Domain Level and make your changes. It will only then
work for all your users.

If you link a Policy with password settings at OU level (like you did
now) the password settings will only have effect on the local passwords
on the client machines.

cheers,

Florian

Great stuff, thanks Florian! :)

However, this leaves me with another issue:

I have created a new Domain Level GPO with the relevant password
settings enabled, but if I then run GPRESULT on the PC, it shows that
my new Domain Level GPO is being denied because of Security Filtering
(it is the same for the Default Domain Policy, that is being denied as
well). I don't know what this means.

Can you help please?

Many thanks

Dave

.

Relevant Pages

  • Re: What the "Local Group Policy" definition?
    ... "Internet Explorer Maintenance Policy Processing" setting at the default ... thus the Local Group policy is winning. ... or will applying this at the domain level casue the Citrix Loopback ... settings can be a pain to get working right. ...
    (microsoft.public.windows.group_policy)
  • Re: Account Lockout Threshold change - Not taking effect
    ... The other policy is linked at the domain level. ... I even changed the settings to 5 attempt. ... Have you tried unlinking the additional GPO you've created at the Domain ...
    (microsoft.public.windows.server.active_directory)
  • Re: Security hierarchy
    ... can be configured only at domain level. ... would only apply to local machine accounts if domain policy is overridden.. ... I have found that sometimes certain settings do not "show up" in a timely ... > Currently Domain and DC Security policy have all display password ...
    (microsoft.public.win2000.security)
  • Re: GP not working under Container
    ... Do you want me to link to the Default Domain Policy? ... So, after you created a OU and put your users into it, you create a new GP with the settings you want the users in the newly created OU to have. ... You might want to create a new GP at domain level and make your settings there. ... Local Policies will be overwritten by site policies will be overwritten by domain policies that will be overwritten by OU specific policies, ...
    (microsoft.public.win2000.group_policy)
  • Re: scripted logon
    ... Why can't you launch all the scripts from a Group Policy based Logon script. ... Here's the policy settings (I sure hope word wrap doesn't mess it up too ... Windows Components/Windows Installer ...
    (microsoft.public.windows.terminal_services)