1. The editors aren't context
sensitive.
2. You can set lockout policies for other machines at the
OU level.
joe
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Senthil Kumar
Sent: Wednesday, March 02, 2005 4:05 PM
To: [email protected]
Subject: RE: [ActiveDir] Problem in account lockout duration !!
I found the account lock out option in All the group policies .If it can be
only used as a domain wide why microsoft given that in all the policies computer
configuration section.What is the use of that in all the OU group
policies.
Regards,
K.SENTHIL KUMAR
joe <[EMAIL PROTECTED]> wrote:
joe <[EMAIL PROTECTED]> wrote:
The lockout policy on domains applies to the domain NC object and sets the following three attributeslockoutDuration
lockoutThreshold
lockoutTimeI.E. Lockout policy for domain user accounts is domain wide. You can not set different policies for different users in the same domain via OU GPOs or any other mechanism.joe
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Senthil Kumar
Sent: Wednesday, March 02, 2005 2:29 PM
To: [email protected]
Subject: [ActiveDir] Problem in account lockout duration !!Hi,I have installed acctinfo.dll in all my win2k3 domain controllers in my domain. In the additional account info tab when I click Domain PW info button it shows the acount lock out duration 30 minutes which I have set for my default domain policy. But I have created an additional OU and placed that user inside that OU, which is having a separated group policy with the setting of no override and having 5 minutes account lock out duration. Now I want to know which one will be effective for the user either Domain policy or OU group policy.Regards,K.SENTHIL KUMAR__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
__________________________________________________
Do You Yahoo!?
Tired
of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
