Re: Domain-level group policies

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Howdie!

pg@xxxxxxxxxxx schrieb:
If I have a general policy in my organisation which states that
passwords must be changed every 42 days, but I have a separate
requirement for my R&D department which states they must be changed
every 30 days, do I have to separate R&D into its own domain?

Yes, you have to. Password Policies are only valid for domain accounts when linked to the domain level - otherwise they'll apply to the local computer's user accounts.

cheers,

Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
.

Relevant Pages

  • Re: Changing Passwords for services
    ... > We have domain accounts on our windows servers 2000/2003 where we want to change the passwords from command line i think we can change using net user but there ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.win2000.cmdprompt.admin)
  • Re: Domain-level group policies
    ... is being in ways changed with release of W2k8. ... do I have to separate R&D into its own domain? ... Password Policies are only valid for domain accounts ...
    (microsoft.public.windows.group_policy)
  • Encrypting database
    ... database needs to be hidden from users that can normally read the ... encrypt that key with passwords of users that have access to the data ... separate and unrelated issue for this:) ...
    (sci.crypt)
  • Re: Domain-level group policies
    ... my head around it! ... do I have to separate R&D into its own domain? ... Password Policies are only valid for domain accounts ...
    (microsoft.public.windows.group_policy)
  • Logging on to an ex-Domain PC
    ... You can log in to one of the computer's domain accounts ... That login can reset the local computer account ... > know any users or passwords for the PC. ...
    (microsoft.public.windowsxp.general)