Password policies can be set at the domain level only. That's why it won't
apply at the OU level.
If you want to see if a policy is taking effect or not, use gpresult, from
the Resource Kit. Or, get the demo of FAZAM, for a little more detailed
information.
Tyson.
-----Original Message-----
From: Juan Rosas [mailto:[EMAIL PROTECTED]]
Sent: November 26, 2001 2:17 PM
To: NT 2000 Discussions
Subject: GPO Inheritance problem.
I have setup the following Structure for the GPOs in our Domain:
Since we are currently moving from Novell to 2000 we cannot apply the same
policies to all the users, what I did to avoid this problem is to setup an
OU that contains all the users OUs, this allows me to make the majority of
the configuration changes in the top level OU and if a department requires
specific changes or restrictions I create their own OU. I have block
inheritance to stop the Default Domain Policy from affecting the two others
OUs then I linked the two policies.
The problems is that if I set a change under Computer Configuration policy
for the departmental OU like made the password length 10 characters the
change does not work.( after refreshing manually with
secedit) however if I do make a change on the User Configuration the changes
worked fine (same OU). Now if I make the changes in the Default Domain
policy GPO the changes flow down and they work. I am not sure what causes
this. any advice will be appreciated
Thank you
Juan Rosas
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
