Re: GPO Settings not applying

Florian Frommherz wrote:
Howdie!

I'm afraid but I don't get your problem, I think. What did you do? Add
the computer from where you want to log in into the newly created OU?
[quoted text clipped - 6 lines]
- well its like this im adding a new computer which according to the error
it is already existing

If you have joined your computer to the domain, there should be a
computer account for that computer. It maybe is the one located at the
"Computers" container.

- also is there a way i can check if all the settings i placed in the
computer settings or in the user settings is being applied. i configure the
account lockout policy to lockout 3 failed login attempts. it tried to login
6 times in the domain with wrong user name and password but it didn't lockout.

Since you have Windows XP workstations you can use rsop.msc to collect
the resultant settings from a remote workstation. Just have a try.

I assume that you want to configure the lockout policy for domain
accounts which means that after three failed attempts, the Active
Directory user account shall be locked out. If so, you'll have to link
that policy at Domain Level, in order to get that working. Password
Policies (and account lockout features) need to be linked to domain
level. When linked to an OU, the settings made in the GPO will apply to
the local accounts on the computer, not the ones in Active Directory.

cheers,

Florian

- well everything you said works... thanks a lot....:)

--
Message posted via http://www.winserverkb.com

.

Relevant Pages

  • Re: OU group policy and how to use ldapsearch to find GPO settings
    ... The account is a domain account. ... Account Policies effective for all domain accounts. ... Your ldap query is seeing the settings that are in use for the domain. ... If I configure the account lockout policy in the default domain policy, ...
    (microsoft.public.windows.group_policy)
  • Re: GPO Settings not applying
    ... Of course is it okay to "Move" the computer's Active Directory account into that newly created OU to which you linked your policy - otherwise the computer wouldn't pick up the policy settings again. ... account lockout policy to lockout 3 failed login attempts. ...
    (microsoft.public.windows.group_policy)
  • Re: OU group policy and how to use ldapsearch to find GPO settings
    ... There is only one set of Account policies that are applied to all accounts ... policy settings for the machine local account of computers in those OUs. ... If I configure the account lockout policy in the default domain policy, ...
    (microsoft.public.windows.group_policy)
  • Re: LockoutThreshold
    ... > You can if you use something like Virtual PC or Virtual Server or VMWARE. ... Keep in mind the lockout policy is ... Keep in mind the lockout policy is to> slow down hacking attempts on an account. ...
    (microsoft.public.win2000.active_directory)
  • Re: Should programs install to All Users, Default User, or Me?
    ... > ...where you have to duplicate settings to each account by hand. ... well - - - everything visible in Admin as I have in woody! ... For now I reset the basics and log'd out of admin and back into woody, ...
    (microsoft.public.windowsxp.general)
Loading