RE: [ActiveDir] Problem in account lockout duration !!

[Myrick, Todd (NIH/CC/DNA)]

Account Policy for users can only be set at the domain level.   I believe it is possible to set Local Account Policy on groups of Workstations and servers via GPO, but all domain credentials will use the domain account policy.   Thanks,   Todd Myrick   From: Senthil Kumar [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 02, 2005 2:29 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Problem in account lockout duration !!   Hi, I have installed acctinfo.dll in all my win2k3 domain controllers in my domain. In the additional account info tab when I click Domain PW info button it shows the acount lock out duration 30 minutes which I have set for my default domain policy. But I have created an additional OU and placed that user inside that OU, which is having a separated group policy with the setting of no override and having 5 minutes account lock out duration. Now I want to know which one will be effective for the user either Domain policy or OU group policy.     Regards,   K.SENTHIL KUMAR __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com