Re: Where to set the domain password policy up?

From: Richard Mueller [MVP] (rlmueller-NOSPAM_at_ameritech.NOSPAM.net)
Date: 02/05/04 

Date: Thu, 5 Feb 2004 15:56:15 -0600

Spin wrote:

> Is it better to set a domain password policy up at the domain node level
> (domain.gov, the properties of the domain node icon showing near the top
> left of AD Users and Computers), or is it better to set up the domain
> password policy up in properties of the Default Domain Controllers OU of
the
> domain in question?

Hi,

Password policies can only be applied at the domain level. You can make
entries at the OU level, but they have no affect. 

-- 
Richard
Microsoft MVP Scripting and ADSI
HilltopLab web site - http://www.rlmueller.net
--

Relevant Pages

  • Re: Password policy
    ... Password policies must be set at the domain level. ... Windows 2003 as well. ... > the password policy, and link it to domain controllers. ... > replicate to all domain computers. ...
    (microsoft.public.win2000.security)
  • Re: enforce complex passwords question
    ... > Password policy can only be applied at the domain level. ... > affects the local SAM of the computers within scope. ...
    (microsoft.public.windows.server.active_directory)
  • Re: enforce complex passwords question
    ... Password policy can only be applied at the domain level. ... affects the local SAM of the computers within scope. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password Policy
    ... Password policy for domain accounts can only be configured at the domain level. ... Office computers in the office folder, ...
    (microsoft.public.win2000.security)
  • Re: Simple question on Password Policy
    ... The password policy is enforced by whatever computer owns the user account. ... Default Domain policy so that it is enforced by all domain member computers ... For domain user accounts, it is the domain ... those computers enforce whatever password policy applies to ...
    (microsoft.public.win2000.group_policy)
Loading