Re: Password restriction in forest

Hi,

Like the previous post, the Default domain policy (or a policy at the
domain level higher than the default domain policy) is where the
changes have to be made on a per domain level. Cannot be done at the
forest level.
Now, if whatever settings you are going to change, please remember
this;
If the setting is "enabled", do not just set it to not defined you will
have to set this setting to "disabled"
If a setting was set, you do not "unset it" if you want to say by just
setting it to not defined.

Good luck

Harj Singh
Power Your Active Directory Investment
www.specopssoft.com


Danny Sanders wrote:
Chang the account policy per domain.

hth
DDS
"Simon Renshaw" <simon@xxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:u23qWIAPHHA.780@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

I have a forest with 3 domains in it.

To do some testing, I want to remove all restrictions on password
complexity.

Is there a way to do this at the forest level or do I need to go change
the policy of each domain?

Thanks!
Simon


.

Relevant Pages

  • Re: Password expiration
    ... Open GPMC and edit a policy which set at the domain level, normally Default domain policy. ... Disclaimer: This posting is provided "AS IS" with no warranties, ...
    (microsoft.public.windows.server.security)
  • Re: Account Lockout not being applied
    ... Are you setting it in the Default Domain Policy? ... If not, that is why it isn't working, it can only be set at the domain level currently. ... Joe Richards Microsoft MVP Windows Server Directory Services ... Author of O'Reilly Active Directory Third Edition ...
    (microsoft.public.win2000.security)
  • Re: Strong Password setting using GPO
    ... Is it possible to just apply Strong Password settings GPO to individual containers or does it have to be done at the domain level? ... Everything I see in documentation references making a copy of the default domain policy. ... Multiple Password Policies is not supported in Windows Server 2003 - but there's a bunch of third party software out there than can take care of it. ...
    (microsoft.public.security)
  • Re: Default Group Policy Disabled
    ... The default domain policy or policies at that level hold the password/lockout policy and have to be linked to domain level. ... Password policy you can also not block when using block inheritance on the OU's. ...
    (microsoft.public.windows.group_policy)
  • Re: Raise forest/domain level
    ... I believe that the domain level increase must be targetted against the PDCe ... and the forest level increase against the Schema master. ...
    (microsoft.public.windows.server.active_directory)