Domain Password Policy



On our Windows 2003 domain the password expiration policy (# of days until
expire) on the domain policy keeps getting reset. This happens a couple of
times every day. We have it set at 230 days and it gets reset to 150.
About an hour later it gets set back to 230. All of this is happening
automatically. We do not know what is doing this. I thought that maybe one
of our DCs did not have the right setting and replicating this change. But
I checked the domain policy on all of the DC and they are all set to 230.
Has anyone seen something like this? Any ideas appreciated.

Clay Hilton


.



Relevant Pages

  • XP sp2 cd Burning question on a 2k network
    ... I have 2k network and I had to reset my domain policy as well as local ... Allow logon local to computer - set to admin and domain users ... allow burning by drag and drop.. ...
    (microsoft.public.win2000.general)
  • Re: Sudden logon problems to win2003 domain
    ... > lockout duration and reset bad PW count are set to 30 minutes instead of ... > ones configured in the Default Domain Policy ... You don't have to set this through the DDP, you simply have to set it via a ...
    (microsoft.public.windows.server.active_directory)
  • Re: Default Domain Policy not applying computer settings
    ... The default domain policy has been modified to death ... To reset the Default Domain GPO and/or the Default Domain Controllers ... GPO tooling is available for windows 2000 and windows 2003. ...
    (microsoft.public.win2000.group_policy)
  • Re: Domain Password Policy
    ... but you may want to consider some auditing to ... We have it set at 230 days and it gets reset to 150. ... > of our DCs did not have the right setting and replicating this change. ... > I checked the domain policy on all of the DC and they are all set to 230. ...
    (microsoft.public.windows.server.active_directory)
  • AD 2003 password expiration/complexity question
    ... if my domain policy says maximum password age is zero days (passwords never ... expire) and i change it to an arbitrary number, say 10, and all accounts are ...
    (microsoft.public.windows.server.active_directory)

Loading