Sorry, that should have been, "...check that you have not set Block Inheritance on the Group Policy tab of Domain Controllers OU properties."


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray
Sent: Dienstag, 25. November 2003 07:54
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Password Policy

Hi Brad
 
The password policy is, as you correctly suggest, set in the Default Domain GPO.  On the other hand it is enforced by the domain DCs, so check that you have not set Block Inheritance on the Default Domain Controllers Policy.  If you have, the password policy change will not be enforced.
 
Tony


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brad Martin
Sent: Montag, 24. November 2003 23:46
To: Active Directory Mailing List
Subject: [ActiveDir] Password Policy

Ok, I believe I’ve seen this covered before, but I don’t remember when.  If you have a password policy set up in your Default Domain GPO and you need to change it, say to allow shorter passwords then before, when you make the change it does seem to go into effect.  I made the change in the GPO, and did a Secedit /refreshpolicy on the domain controllers, but when I try and create a test account that conforms to the new password rules it give me an error.  What do I need to do to lessen the password requirements?

 

Brad Martin

GoDaddy.Com

480.505.8800 ext. 250

[EMAIL PROTECTED]

http://www.godaddy.com

 

 

 

Attachment: image001.gif
Description: Binary data

Reply via email to