Re: User account password vs Group policy settings for it

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Derek Melber [MVP] (derekm_at_braincore.net)
Date: 04/27/04 

Date: Tue, 27 Apr 2004 08:41:31 -0700

The user's individual settings have precedence. This allows for the ultimate
in granularity. 

-- 
Derek Melber
BrainCore.Net
derekm@braincore.net
"Brian Henry" <brianiupmsdn@newsgroups.nospam> wrote in message
news:em4OAzFLEHA.3664@TK2MSFTNGP10.phx.gbl...
> If a user account in AD under the account tab of the users property for
the
> settings under account options has password never expires checked, but the
> domain has a domain policy that says users must change passwords every 90
> days, which one overrides which? thanks
>
>

Relevant Pages

  • Re: User account password vs Group policy settings for it
    ... > The user's individual settings have precedence. ... >> If a user account in AD under the account tab of the users property for ... >> domain has a domain policy that says users must change passwords every ...
    (microsoft.public.windows.server.active_directory)
  • Re: Problem running a script
    ... ' UserAccountControl .vbs ... ' Here is where we set the value to enable the account ... ' The heart of this script - Enable users ... how do I determine which part of domain policy is stopping this from running so that I can disable it. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account Lockout Threshold change - Not taking effect
    ... This posting is provided "AS IS" with no warranties, ... The GPO (Default Domain Policy) that has the account lockout setting ...
    (microsoft.public.windows.server.active_directory)
  • Re: MP Control Manager Issue
    ... The server is not a DC. ... Do not know if there is a domain policy, ... >> this MP Control Manager Issue which I did not have in the test lab setup. ... If using a standard SQL security account, ...
    (microsoft.public.sms.admin)
  • Re: remove domain gp settings
    ... The default domain policy was indeed cached, and the rsop.msc confirmed it, ... something in our default domain policy uses the renamed account ... I had to rename the administrator account to the name we ...
    (microsoft.public.windows.group_policy)