Re: Problem With Password Policy

In news:e3nfM3MvGHA.2036@xxxxxxxxxxxxxxxxxxxx,
Norbert Fehlauer [MVP] <n.fehlauer@xxxxxxx> stated, which I commented on
below:

That has nothing to do with the normal GPO behavior. Usually the
Policy on the nearest OU to the userobject takes precedence. But
password policy is an exception and can only be set on domain level.

All users must be in the OU as containers do not pick up secuirty.

All users are picked by a domain level policy. So don't care in which
OU the useraccount resists.

I agree with you Norbert. Password Policies can only be set at the domain
level to work (Default Domain GPO). They will not work at any other level.

--
Ace
Innovative IT Concepts, Inc
Willow Grove, PA

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Directory Services
Microsoft Certified Trainer

Having difficulty reading or finding responses to your post?
Instead of the website you're using, I suggest to use OEx (Outlook Express
or any other newsreader), and configure a news account, pointing to
news.microsoft.com. This is a direct link to the Microsoft Public
Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows you
to easily find, track threads, cross-post, sort by date, poster's name,
watched threads or subject.
It's easy:

How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164

Infinite Diversities in Infinite Combinations
Assimilation Imminent. Resistance is Futile
"Very funny Scotty. Now, beam down my clothes."

The only constant in life is change...


.

Relevant Pages

  • =?iso-8859-1?B?UmU6IEdQTyBkb2VzbrR0IGFwcGx5Lg==?=
    ... You can set the password policy only on domain level, ... Microsoft MVP - Windows Server - Group Policy. ...
    (microsoft.public.windows.server.active_directory)
  • =?Utf-8?Q?Re:_GPO_doesn=C2=B4t_apply.?=
    ... You can set the password policy only on domain level, ... Microsoft MVP - Windows Server - Group Policy. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password policy
    ... Make sure that you configure domain password policy at the domain level ... Group Policy in the domain container then the Group Policy at the top of the ...
    (microsoft.public.windows.server.security)
  • Re: Domain
    ... Domain Controller Security Policy has all user rights assignments ... Configuring ipsec policy at the domain level ...
    (microsoft.public.win2000.group_policy)
  • Re: Security hierarchy
    ... policy level also. ... >>can be configured only at domain level. ... Try running security configuration and ... >>try not to change domain and domain controller policy, ...
    (microsoft.public.win2000.security)