Re: Sub OU Computer Config Settings Not Working

Hello Robert,

Domain Policy Settings

The security settings in this section of the appendix apply to the domain. These settings are applied through the Computer Configuration node in the Group Policy Object Editor. Within this node, the following setting groups appear in the Windows Settings sub-node:

Password Policy Settings Account Lockout Policy Settings


From:
http://technet.microsoft.com/en-us/library/cc264456.aspx

I choose this article about server 2008, because with 2008 you are able to set also policies on OU level. All other OS before 2008 only use the Domain level as stated above.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Is there a KB stating this? I have to prove to the CIO that we have
to do Domain level strong passwords and not just on an OU level.

Thanks.

"Florian Frommherz [MVP]" wrote:

Howdie!

Rogene schrieb:

Can you recommend any third party tools?

Specops Password Policy and Altus Passfilt Pro are two of the better
ones I've seen and read about. Although they're not for free, I
guess.

Hum - I just recognized that Altus seems to be aquired by nFront.
Anyway, the product seems to be still the same:
http://nfrontsecurity.com/products/nfront-password-filter/
http://www.specopssoft.com/

cheers,

Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Use a newsreader! http://www.frickelsoft.net/news.html


.

Relevant Pages

  • Re: Need clarifications on registry-based policy settings and GP m
    ... MVP Windows Shelll/User ... For example, the Internet Explorer settings can be Enforced, or they can ... It is rather self evident that the local policy settings would ... even if I'm not translating anything. ...
    (microsoft.public.windows.group_policy)
  • Re: Need clarifications on registry-based policy settings and GP m
    ... For example, the Internet Explorer settings can be Enforced, or they can be ... Preference settings are omitted (there would be no way of knowing at the ... "Migration" appears simply to mean a fresh install but in the same GPO ... It is rather self evident that the local policy settings would not ...
    (microsoft.public.windows.group_policy)
  • SMB Signing question, SBS2k
    ... Is the SMB signing issue with XP PRO sp1 and SBS2k still an issue? ... several users complained that copying file to the server ... 10)DNS settings were correct in ipconfig /all. ... use Group Policy settings to turn off SMB ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: SMB Signing question, SBS2k
    ... > Is the SMB signing issue with XP PRO sp1 and SBS2k still an issue? ... several users complained that copying file to the server ... > 10)DNS settings were correct in ipconfig /all. ... > To work around this problem, use Group Policy settings to turn off SMB ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: security
    ... Password security can only be set at the domain level - well, ... but only domain level settings will prevail. ... > but still same problem when creating an account. ...
    (microsoft.public.windows.server.general)