Re: User log on lock out policy does not function correctly in 2003

From: AndyC (andyc69_at_tiscali.co.uk)
Date: 07/12/04


Date: Mon, 12 Jul 2004 13:35:01 +0100

Where are you setting the policy? The password policy has to be set at
Domain level otherwise it will not function in the way you expect (that is,
the settings will apply but only to local accounts on machines)

AndyC

"Geoff Hall" <geoff@absolutelynospam_task-it.co.uk> wrote in message
news:%23WmK$XTZEHA.1248@TK2MSFTNGP11.phx.gbl...
> I've just posted an alarmingly similar incident, mine are all XP clients
and
> regardless of password policy settings the clients are unable to change
> their own passwords.
> If change the min password lenght to 3 chars the clients are told despite
> using a 10 char complex password that it does not meet the requirements.
> No matter what the policy says the users can't change the password.
> The result is the Admin is having to do all the user password changes!.
> Not good in a school of 1200.
>
> Bizzare.
>
> "Nathan H" <anonymous@discussions.microsoft.com> wrote in message
> news:eEfjjKAZEHA.4092@TK2MSFTNGP11.phx.gbl...
> > Hi all
> >
> > I'm having a lot of trouble at the moment with users attempting to log
on
> > and then maybe typing
> > their password incorrectly by accident and the system locks them out -
> this
> > happens on
> > win 98 clients (am not sure if it happens on the XP clients yet). I've
> tried
> > changing the lockout
> > policy but it doesn't seem to have made any difference.
> >
> > Can anyone suggest anything on this?
> >
> > Also, I've had alot of problems when users attempt to log on for the
first
> > time and must change their password under the 98 clients, it changes it
> > but then returns them to the login screen (with the password filled in)
> and
> > then they try and log in and they can't log in.
> >
> > If they shutdown the computer (Ctrl-Alt-Del) and then restart, 9 times
out
> > of 10 they can log straight in but it seems that the computer, indeed
all
> > the
> > 98 computers have to restart before they recognise changes to user
> accounts
> > or something like that.
> >
> > Running a 2003 domain as 2000 native - should I make it a "true" 2003
> > domain?
> > I have a NT 4 server that I intend to wipe and attach to the domain (as
a
> > app server)
> > but dunno whether that'll work or not, but most concerned about the user
> > problems
> >
> > Can anyone shed any light on these matters as I'm pulling my hair out
over
> > these things
> > and we dont have the budget to get microsoft support to help us :(
> >
> > Best regards to you all,
> >
> > --
> > Nathan Harmsworth
> > IT / Network Administrator
> > Ysgol Bro Ddyfi (Edu)
> >
> >
>
>



Relevant Pages

  • Re: scripted logon
    ... Why can't you launch all the scripts from a Group Policy based Logon script. ... Here's the policy settings (I sure hope word wrap doesn't mess it up too ... Windows Components/Windows Installer ...
    (microsoft.public.windows.terminal_services)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... Server Security and Auditing Policy ... This list only includes links in the domain of the GPO. ... The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... > Server Security and Auditing Policy ... > This list only includes links in the domain of the GPO. ... > The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... >> Server Security and Auditing Policy ... >> The settings in this GPO can only apply to the following groups, users, ... >> Windows Firewall: Allow file and printer sharing exception Enabled ...
    (microsoft.public.win2000.group_policy)
  • Re: Proxy Settings
    ... Unfortunatly there is no common theme, it is happening on win2K and XP clients. ... The support site looks you directed me to does look useful though, ... It only applies when the policy changes or is ... >> to be picking up the policy but the proxy settings are not being set. ...
    (microsoft.public.win2000.group_policy)

Loading