Re: Domain Password Policy

I haven't seen that happen, but you may want to consider some auditing to
find out what's doing this. Sounds like something or somebody is involved as
that is not normal behavior.

Al
"Clay Hilton" <clay.a.hilton@xxxxxxxxxxxxxx> wrote in message
news:eX%23ybBsNFHA.2728@xxxxxxxxxxxxxxxxxxxxxxx
> On our Windows 2003 domain the password expiration policy (# of days until
> expire) on the domain policy keeps getting reset. This happens a couple
> of
> times every day. We have it set at 230 days and it gets reset to 150.
> About an hour later it gets set back to 230. All of this is happening
> automatically. We do not know what is doing this. I thought that maybe
> one
> of our DCs did not have the right setting and replicating this change.
> But
> I checked the domain policy on all of the DC and they are all set to 230.
> Has anyone seen something like this? Any ideas appreciated.
>
> Clay Hilton
>
>


.

Relevant Pages

  • XP sp2 cd Burning question on a 2k network
    ... I have 2k network and I had to reset my domain policy as well as local ... Allow logon local to computer - set to admin and domain users ... allow burning by drag and drop.. ...
    (microsoft.public.win2000.general)
  • Re: Sudden logon problems to win2003 domain
    ... > lockout duration and reset bad PW count are set to 30 minutes instead of ... > ones configured in the Default Domain Policy ... You don't have to set this through the DDP, you simply have to set it via a ...
    (microsoft.public.windows.server.active_directory)
  • Re: Default Domain Policy not applying computer settings
    ... The default domain policy has been modified to death ... To reset the Default Domain GPO and/or the Default Domain Controllers ... GPO tooling is available for windows 2000 and windows 2003. ...
    (microsoft.public.win2000.group_policy)
  • Domain Password Policy
    ... On our Windows 2003 domain the password expiration policy (# of days until ... expire) on the domain policy keeps getting reset. ... We have it set at 230 days and it gets reset to 150. ... I checked the domain policy on all of the DC and they are all set to 230. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Track when users login
    ... You should enable account logon audit in the default domain policy ... > logs onto the console of a DC by setting up auditing of Active Directory ...
    (microsoft.public.win2000.security)