Re: GPO doesn´t apply.



Carlos schrieb:
However, the policy doesn´t apply to users.

I suspect that there is a problem with Active Directory because when i run DCDIAG the following error occurs:

[log output]

Are these facts related?

Not neccessarily. DCDIAG will throw a warning whenever there are events in the eventlog. Check those events and see if they point to a serious error.

Where did you link the policy to? Remember: it must be linked at domain level and has to have the highest procedence (over all other password policy GPs). In order to take effect over an account, the user needs to change the password. Users won't be prompted to change their passwords if they are valid.

cheers,

Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
.



Relevant Pages

  • Re: Password Policy
    ... If you have different settings between old and new DC's, it seems fro a replication problem between the DC's. ... If you don't have the support tools installed, install them from your server install disk. ... Run dcdiag, netdiag and repadmin in verbose mode. ... I have a Password policy in the Default Domain Group Policy. ...
    (microsoft.public.windows.group_policy)
  • Re: Problem with migrating SIDs
    ... Controller Policy as below: ... please check run Dcdiag and Netdiag to ... what migration scenario you are involved in: ...
    (microsoft.public.windows.server.migration)
  • Re: GPO Error on Default Domain Policy
    ... Interesting I have never seen that before on a dcdiag. ... > ensure that you can contact the server that authenticated you.. ... > code from authentication protocol Kerberos was "The handle specified is ... >>>I am getting an error with the Default Domain Policy in my domain. ...
    (microsoft.public.win2000.security)
  • Re: Login into OWA
    ... something to do with the security policy. ... For Basic to work, the user needs ... to have the Logon Locally right on the web server. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Password complexity policy not being enforced
    ... Only message was w.r.t IPSec policy. ... GPOTOOL and GPRESULT would also be a good thing to ... >> tool gpotool to see if Group Policy is being replicated and run dcdiag on ...
    (microsoft.public.win2000.group_policy)