Re: AD Group Policy Help

From: ptwilliams (ptw2001_at_hotmail.com)
Date: 07/07/04 

Date: Wed, 7 Jul 2004 20:29:01 +0100

OK...Passwords can only be set at the domain level.

Don't disable the DDP. Don't set the No Override flag on it either.

Now anything applied (other than domain specific options such as password
policy) lower down will override. The order of policy processing is Local,
Site, Domain, OU. Last to apply wins (by default).

If you wish to have different password policies you will need multiple
domains. 

-- 
Paul Williams
_________________________________________
 http://www.msresource.net
Join us in our new forums!
  http://forums.msresource.net
_________________________________________
"AMerrell" <anonymous@harlingen.tstc.edu> wrote in message
news:eswjRvDZEHA.3304@TK2MSFTNGP09.phx.gbl...
Thanks for the updated tool.
Now I can see all the policies linked to my OU.
The one the is overriding the changes I've made to my OU is the Default
Domain Policy.
Is it a bad practice to disable the Default Policy?
If it is what is normally done since I can't edit the default policy?
Atleast not the password settings.
I'm trying to remove the password complexity check on the user accounts for
an OU.
Thank You,
Ariel Merrell
>>> Mike Brannigan [MSFT]<mikebran@online.microsoft.com> 7/7/2004 8:34:52 AM
>>>
"AMerrell" <anonymous@harlingen.tstc.edu> wrote in message
news:OXv8HUCZEHA.3128@TK2MSFTNGP09.phx.gbl...
>
>
> I am trying to set up an Active Directory Domain controller.
>
> I have created some OU's with different group policies for each one.
>
> I have been following all the documents I've found here:
>
>
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en%2Dus/?frame=true
>
> The problem I'm having is another policy keeps overriding my group
policies.  I have my group policies set with no override.  I'm guessing it's
a local policy on the domain controller that keeps overriding.
>
> Is there something I need to disable in order to get my group policies on
my OU's to work?  I'm running a new installation of Windows Server 2003.
>
Your policies are being applied in the order Site, Domain , OU(s) and Local.
So if any policy has a no override flag in the chain you will not be able to
reset the values, even if lower policies have block inheritance and/or no
override set.
Use the Group Policy Management Console to look at the resultant set of
policy and other simulations etc
See
http://www.microsoft.com/windowsserver2003/gpmc/default.mspx
-- 
Regards,
Mike
--
Mike Brannigan [Microsoft]
This posting is provided "AS IS" with no warranties, and confers no
rights
Please note I cannot respond to e-mailed questions, please use these
newsgroups
"AMerrell" <anonymous@harlingen.tstc.edu> wrote in message
news:OXv8HUCZEHA.3128@TK2MSFTNGP09.phx.gbl...
>
>
> I am trying to set up an Active Directory Domain controller.
>
> I have created some OU's with different group policies for each one.
>
> I have been following all the documents I've found here:
>
>
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en%2Dus/?frame=true
>
> The problem I'm having is another policy keeps overriding my group
policies.  I have my group policies set with no override.  I'm guessing it's
a local policy on the domain controller that keeps overriding.
>
> Is there something I need to disable in order to get my group policies on
my OU's to work?  I'm running a new installation of Windows Server 2003.
>
>
> Thanks for any help!