Re: Blank password GPO for a specific OU

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Chriss3 [MVP] (noSpamHere_at_chrisse.se)
Date: 07/12/04 

Date: Mon, 12 Jul 2004 12:37:04 +0200

Hello muffin

Define a password policy within a GPO linked to some thing else than the
domain node dose only effect local accounts and not domain accounts.

The password policy is domain wide and can only be set once peer domain.

More information
If one or more policies at the domain level with password policies are in
conflict the policy listed in the top are applied.

policies at OUs and Sites can only be applied to local users accounts. 

-- 
Regards
Christoffer Andersson
Microsoft MVP - Directory Services
No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Tips
"muffin" <someone> skrev i meddelandet
news:%232kRMe$ZEHA.596@TK2MSFTNGP11.phx.gbl...
> Hello,
>
> Is it possible to have users logging in a specific OU where there are no
> password restrictions at all? For some reason this doesn't seem to work in
> my testing environment (AD based on server 2003). I keep getting security
> related messages when I want to reset a user's password with no password
at
> all.
>
> TIA
> Jeff
>
>

Relevant Pages

  • Re: Domain password policy problems
    ... password policies within a single domain. ... Password Policy done right ... If a GPO linked at the domain level applies to all accounts and Gpos ...
    (microsoft.public.windows.group_policy)
  • Re: Where to set the domain password policy up?
    ... Account Policies applied to Domain Controllers apply to all accounts stored on domain controllers - that is, to all domain accounts in that domain! ... I'd say apply at the domain level still - to have consistent policy for domain accounts in the domain as well as for local accounts on all computers in that domain. ... > Is it better to set a domain password policy up at the domain node level ...
    (microsoft.public.windows.server.active_directory)
  • RE: ADAM and Password Policies
    ... the password policies for ADAM turned off. ... What will happen to the accounts that are created in ADAM but do not have ... Is there a way to create a seperate password policy but only for the ADAM ...
    (microsoft.public.windows.server.active_directory)
  • Re: SOX compliant .. different password policy need for privil
    ... I am curious to know if once a forest and a root domain is created, ... have the password policy for the new ... match the existing domain, move all user accounts to the new domain, ... and keep the privileged accounts in the existing domain (after all ...
    (microsoft.public.win2000.active_directory)
  • Re: SOX compliant .. different password policy need for privil
    ... have the password policy for the new domain ... the password policy on the forest root domain to meet the SOX ... and force all administrative accounts to reset their passwords under the ... policy for all privilege accounts however our Win2003 forest consist ...
    (microsoft.public.win2000.active_directory)