Re: Group Policy - Maximum Password Age

Tech-Archive recommends: Speed Up your PC by fixing your registry

Howdie!

Flash3200 wrote:
OK, this is weird.... In Group Policy we have the Default Domain set
to Disabled. However, even though it is set to Disabled it does have
settings in it from when it use to be Enabled. One of the settings is
that the Maximum Password Age is set to 90 Days. Ok, now in the Group
Policy we have set and enabled on the OU for where my user's and
computers reside we have the Maximum Password Age set to 45 Days. Now
this is where it gets weird... even though everything I look at (GP
Modeling, GP Results, etc) says that the Maximum Password Age is set
to 45 Days, it appears that the passwords do not expire until they
reach 90 Days?

Domain Password settings can only be made at the domain level, not at OU level. The settings you linked at the OU will reflect on the local accounts that each machine in the target of the policy has. Have a look at the domain level ... apart from the disabled Default Domain Policy - is there another Group Policy that defines password settings?

cheers,

Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
.

Relevant Pages

  • Re: Group Policy - Maximum Password Age
    ... settings in it from when it use to be Enabled. ... computers reside we have the Maximum Password Age set to 45 Days. ... accounts that each machine in the target of the policy has. ... Disabling the GPO doesn't change it. ...
    (microsoft.public.windows.server.active_directory)
  • Re: What the "Local Group Policy" definition?
    ... "Internet Explorer Maintenance Policy Processing" setting at the default ... thus the Local Group policy is winning. ... or will applying this at the domain level casue the Citrix Loopback ... settings can be a pain to get working right. ...
    (microsoft.public.windows.group_policy)
  • Re: Account Lockout Threshold change - Not taking effect
    ... The other policy is linked at the domain level. ... I even changed the settings to 5 attempt. ... Have you tried unlinking the additional GPO you've created at the Domain ...
    (microsoft.public.windows.server.active_directory)
  • Re: Security hierarchy
    ... can be configured only at domain level. ... would only apply to local machine accounts if domain policy is overridden.. ... I have found that sometimes certain settings do not "show up" in a timely ... > Currently Domain and DC Security policy have all display password ...
    (microsoft.public.win2000.security)
  • Re: Password Policy Not Applying??
    ... Florian Frommherz wrote: ... You need to apply the Password Policy on Domain Level. ... If you link a Policy with password settings at OU level (like you did ...
    (microsoft.public.windows.group_policy)