Re: Assign password policy to OU

Password policies defined in the Default Domain Policy GPO apply to ALL
users in the domain and to ALL users local to each computer
Password policies defined in a custom GPO and linked to whatever OU apply to
ALL users local to each computer

If you need multiple password policies for users within a domain you to
either:
* Have multiple domains where each domain has its own password policy
* Use third party software

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Ken Lizotte" <KenLizotte@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:BEB267F3-2D0E-4250-A9ED-CF12D7FFF6A0@xxxxxxxxxxxxxxxx
I have a small network (1 Domain Controller and 10 workstations). The
Default Domain Policy\Comp Config\Windows Settings\Security
Settings\Account
Policies\Password Policy\Minimum password length =7.

I would like to create a group users whose Min password length is set to
4.

I created an OU called 'Estimators' and created a GPO called Estimator
Group
Policy and set Comp Config\Windows Settings\Security Settings\Account
Policies\Password Policy\Minimum password length =4.

When I try to add a user to this OU, it still requires me to have a
password
lenght of 7.

Where am I going wrong with this setup?

Thanks for any help
Ken


.

Relevant Pages

  • Re: Using GPO to implement Password Policy
    ... will need need another server to use as a domain controller in order to ... Password, Kerberos, and Lockout policy. ... To use password policies you must use them at the domain level. ... I then attempted to then link this GPO to a test OU, ...
    (microsoft.public.windows.server.active_directory)
  • RE: Group Policy: multiple password policies in the same domain?
    ... I'd suspected that you might be able to use a different GPO at the same level but having never tested it I didn't want to committ it to writing! ... Subject: Group Policy: multiple password policies in the same ... You can only affect domain> accounts at the domain level, but you do NOT have to use the> "Default Domain Policy" GPO. ...
    (Focus-Microsoft)
  • Re: Using GPO to implement Password Policy
    ... you will need at least a separate server. ... Password, Kerberos, and Lockout policy. ... To use password policies you must use them at the domain level. ... I then attempted to then link this GPO to a test OU, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Using GPO to implement Password Policy
    ... To use password policies you must use them at the domain level. ... put them in a spearate domain and apply a different policy to that domain. ... I then attempted to then link this GPO to a test OU, ... test account, located in the OU "GPO Test Users". ...
    (microsoft.public.windows.server.active_directory)
  • RE: GPO settings are not applied
    ... Microsoft Windows XP Operating System Group Policy Result tool v2.0 ... GPO: Automatic_Updates ... GPO: Default Domain Policy ... Secure Proxy Server: N/A ...
    (microsoft.public.windows.server.active_directory)