Re: Account Policy clarification

From: Andy Barkl [MVP] (abarkl_at_community.nospam)
Date: 12/18/04 

Date: Fri, 17 Dec 2004 19:11:42 -0700

"John" <John@discussions.microsoft.com> wrote in message
news:471C86B0-3F70-434A-8DDB-10C36C0EBADF@microsoft.com...
> I'm kind of confuse on the settings on the account policy. Running Win2K3
> AD. Workstations are Win2K and XP, mostly. I set the account policy on
> the
> Default Domain Security. Let say, I set the password history to 3, max
> pass
> age to 20 day, min pass age to 1, and min pass length to 5. Then my lock
> out
> policy is duration to 20, threshold to 5 attempts, and reset counter after
> 20
> minutes.
>
> My question is, since this affect the domain, would it also affect the
> local
> account on my workstations THAT IS part of the domin. For example, I have
> a
> Win2K workstation on the domain with two local user accounts. Those two
> local user accounts are admin accounts. The "Password never expire" ARE
> NOT
> check on their properties. Their passwords have not been changed in 90
> days.
> Since this workstation is part of the domain above, when I log in locally
> to
> this computer with the local account, would it force me to change my local
> user's password?
>
> basically, my question is would setting the account policy on the Default
> Domain Policy affect the local users account, if the workstation is part
> of
> the domain?

A simple and sweet answer: No. They are local accounts (not domain) and not
affected by the domain password policy.

Relevant Pages

  • Re: Trust relationship between this workstation and Primary Domain
    ... it, with a new computer ID, a new workgroup ID, but again to no avail. ... password policy, renamed admin account, automatic updates are controlled by ... * PLEASE post all messages and replies in the newsgroups ... "Workstation ...
    (microsoft.public.win2000.networking)
  • Re: Re-Post - "the trust relationship between this workstation and
    ... account is NEW to the workstation. ... needs admin group priv at workstation level. ... only problem is adding a new user account on the station. ... This would be on the DNS server 172.20.100.2 ...
    (microsoft.public.windows.server.active_directory)
  • Re: Re-Post - "the trust relationship between this workstation and
    ... "the trust relationship between this workstation and the primary domain ... only problem is adding a new user account on the station. ... The DNS Zone for your AD Domain must be DYNAMIC, ... Client computer must use STRICTLY the INTERNAL DNS server which can ...
    (microsoft.public.windows.server.active_directory)
  • Joining NT4 to a Windows 2000 domain; secure channel prob?
    ... Trying to logon with a domain account pops up the error: ... The trust relationship between this workstation and the primary ... Searching PDC for domain MYDOMAIN ... ...
    (microsoft.public.windows.server.active_directory)
  • Re: Re-Post - "the trust relationship between this workstation and
    ... There were no logged events in either the DC or workstation. ... DC/DNS Server - DCDiag ... Attr: subschemaSubentry ... only problem is adding a new user account on the station. ...
    (microsoft.public.windows.server.active_directory)