Re: finally implementing password policy questions??

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: "Mark Heitbrink [MVP]" <spam-only@xxxxxxxxxxxxxxxxxxxxx>
Date: Fri, 20 Apr 2007 08:23:58 +0200

Hi,

just as an addition:

Bruce Sanderson schrieb:

[internel help] A domain controller always obtains the account policy
from the Default Domain Policy Group Policy object [...]

This is true, but they should correct the help into:
A domain controller always obtains the account policy from the
Domain Level.

The DC obtains it from the DDP, because this Object exists :-)
If you create a secound GPO with, sort it "above", then this will be
the one that take efect.

If you take a look at a SBS Server, you will find 6 instead of 2 GPO,
after demoting the server and one of them is a "Password Policy".

Mark
--
Mark Heitbrink - MVP Windows Server - Group Policy

Homepage: www.gruppenrichtlinien.de - deutsch
Blog: gpupdate.spaces.live.com - english
.

References:
- Re: finally implementing password policy questions??
  - From: Roger Abell [MVP]
- Re: finally implementing password policy questions??
  - From: Roger Abell [MVP]
- Re: finally implementing password policy questions??
  - From: Roger Abell [MVP]
- Re: finally implementing password policy questions??
  - From: Bri
- Re: finally implementing password policy questions??
  - From: Roger Abell [MVP]
- Re: finally implementing password policy questions??
  - From: Bruce Sanderson

Prev by Date: Disable standby feature
Next by Date: Re: Disable standby feature
Previous by thread: Re: finally implementing password policy questions??
Next by thread: DCOM application-specific launch permissions via GPO?
Index(es):
- Date
- Thread

Relevant Pages

RE: Loopback Policy Not Taking Effect
... I setup a fax server that is running WinXP. ... Group Policy was applied from: ... Filtering: Not Applied ...
(microsoft.public.windows.terminal_services)
RE: Companyweb and guests - advice?
... You can find the Default Domain policy under the following node: ... Open server management console, locate Advanced Management -> Group Policy ...
(microsoft.public.windows.server.sbs)
Re: Slow Logon related to groups - Update!
... Sent update to server: 192.1.1.1 ... Group Policy processing aborted. ... Filtering: Denied ...
(microsoft.public.windows.server.sbs)
Re: SBS DCOM
... The doamin policies cahnged, but the local policies of the ... steps to reset the group policy objects to default, ... there are only 9 default group policies on the SBS server. ... Small Business Server Auditing Policy ...
(microsoft.public.windows.server.sbs)
Re: SBS DCOM
... On the server I was afraid to delete them ... (and I can now change policy settings and access DCOM and WMI ... |> steps to reset the group policy objects to default, ...
(microsoft.public.windows.server.sbs)