Re: Sudden logon problems to win2003 domain



> Strange enough when I view the Domain PW Info it clearly states that the
> lockout duration and reset bad PW count are set to 30 minutes instead of
> 15, and furthermore that an account can never be locked out. I've checked
> the DC's with gpedit.msc and indeed these options are set instead of the
> ones configured in the Default Domain Policy

Is there another policy linked to the domain and higher in the list than the
DDP?

You don't have to set this through the DDP, you simply have to set it via a
GPO linked to the domain.


--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net


.



Relevant Pages

  • XP sp2 cd Burning question on a 2k network
    ... I have 2k network and I had to reset my domain policy as well as local ... Allow logon local to computer - set to admin and domain users ... allow burning by drag and drop.. ...
    (microsoft.public.win2000.general)
  • Re: Verständnisfrage Gruppenrichtlinien
    ... Erst die Default Domain Policy, ganze "oben" in der Hierarchie, dann die in ... Einstellungen aus der DDP überschreiben. ...
    (microsoft.public.de.german.windowsxp.gruppen.richtlinien)
  • GUID Use with Well-known Group Policies
    ... The Default Domain Policy (DDP) and Default Domain Controllers Policy ... I have come across a 2K3 environment where the true DDP is not used and ... Windows needs the true DDP to be present and linked to the domain ...
    (microsoft.public.windows.group_policy)
  • GUID Use with Well-known Group Policies
    ... The Default Domain Policy (DDP) and Default Domain Controllers Policy ... I have come across a 2K3 environment where the true DDP is not used and ... Windows needs the true DDP to be present and linked to the domain ...
    (microsoft.public.windows.server.active_directory)
  • Re: Default Domain Policy not applying computer settings
    ... The default domain policy has been modified to death ... To reset the Default Domain GPO and/or the Default Domain Controllers ... GPO tooling is available for windows 2000 and windows 2003. ...
    (microsoft.public.win2000.group_policy)