Security Policy for OU?

From: frankcvc (frankcvc_at_discussions.microsoft.com)
Date: 11/07/04 

Date: Sun, 7 Nov 2004 14:34:02 -0800

Can you set up the security GPO at OU level, such as account and password
policies? I created such a policy but it didn't work. If it doesn't work, why
Microsoft still made the options available in GPO editor?

Is there are a way to block domain default security settings? Tried to but
it didn't work either. Wish someone could confirm my testing result.

Many thanks,
  

-- 
Frank

Relevant Pages

  • Re: Security Policy for OU?
    ... > Can you set up the security GPO at OU level, ... I created such a policy but it didn't work. ... The account policies for domain users only apply if they are in the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password policy, no override
    ... DCs will ignore any password policies you set at the domain controller ... I would disagree with setting the password policy on the Default ... > account and not the Domain user account object). ...
    (microsoft.public.win2000.active_directory)
  • Re: Cannot edit "Log on as a service" and "Allow log on locally" policies on W2K3 server.
    ... I am installing a new version of a program on my W2K3 SP1 server and one of the requirements is to create a "local" user account and grant this account ... However when I go into the Local Security Policy editor/Security settings/Local Policies/User Rights Assignment, I do not get the option to add or edit. ... These two policies both have different icons showing so I'm not sure what that indicates but am sure it has to do with why I cannot make any changes there. ... drill down to those settings and it'll tell you which policy is applying to those settings. ...
    (microsoft.public.windows.server.general)
  • Re: GPO configuration
    ... > account/password policy undefined and apply different OU ... > the domain level override OU level? ... I thought the lower GPO policies ... All domain controllers will get their Account ...
    (microsoft.public.cert.exam.mcse)
  • Re: Lock Account/Logoff Time-out
    ... the newer newsgroup for group policy is ... The policies you seem to be using is are not Account Policies ... these settings apply to network logins onto the server ...
    (microsoft.public.security)