RE: [ActiveDir] Problem in account lockout duration !!

[Marcus.Oh]

Can we get this added to the FAQ?  J   marcus c. oh \\.\core technologies\cox communications, inc. \\.\mvp\windows server systems\management [v] 404.847.6117     [c] 404.391.7097   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Wednesday, March 02, 2005 3:19 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Problem in account lockout duration !!   The lockout policy on domains applies to the domain NC object and sets the following three attributes   lockoutDuration lockoutThreshold lockoutTime   I.E. Lockout policy for domain user accounts is domain wide. You can not set different policies for different users in the same domain via OU GPOs or any other mechanism.      joe   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Senthil Kumar Sent: Wednesday, March 02, 2005 2:29 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Problem in account lockout duration !! Hi, I have installed acctinfo.dll in all my win2k3 domain controllers in my domain. In the additional account info tab when I click Domain PW info button it shows the acount lock out duration 30 minutes which I have set for my default domain policy. But I have created an additional OU and placed that user inside that OU, which is having a separated group policy with the setting of no override and having 5 minutes account lock out duration. Now I want to know which one will be effective for the user either Domain policy or OU group policy.     Regards,   K.SENTHIL KUMAR __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com