Re: GPO doesn´t apply.

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hello Florian Frommherz [MVP],

Thanks for clarify this part. I only realized that with 2008 theire will be a way to assign more then one PSO's (former "Password Policies" for me). :-)

Do you have a link to a website about this part?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.

Howdie Meinolf!

Meinolf Weber schrieb:

You can set the password policy only on domain level, not on OU's.
With server 2008 this will be possible.

You actually don't link the "Password Policy" (then called "Password
Setting Objects - PSOs) to OUs in Windows Server 2008 AD DS - you'd
assign them to users or global groups (and inetOrgPerson objects in
AD). Nevertheless, the Default Domain Password Policy remains, afaik.

I managed to confuse that first, too ;)

cheers,

Florian



.

Relevant Pages

  • Re: Question on default domain password policy settings
    ... or buy third party software that allows the configuration of multiple password policies, including the configuration of complexity requirements. ... Windows Server 2008 AD provides for fine-grained password ... Joe Kaplan-MS MVP Directory Services Programming ...
    (microsoft.public.windows.server.active_directory)
  • Re: Can I have multiple password policies?
    ... There are some more details on the Windows Server 2007 Password policies at nice blog and interesting. ... I have the default domain policy, which is fantastic, but I need to ... separate domains. ...
    (microsoft.public.windows.server.security)
  • Re: MY_OWN_POLICY GP doesnt apply
    ... password policy for the entire domain can only be defined in the GPOs ... in Windows Server 2008 ADDS a new feature named Fine-Grained ... Password Policies breaks this limit. ... Microsoft Online Partner Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Can I have multiple password policies?
    ... I'm trying to find out whether or not I can have 2 password policies ... I have the default domain policy, which is fantastic, but I need to ... For Windows Server 2003 and earlier, ... separate domains. ...
    (microsoft.public.windows.server.security)