Ah.. There goes the good old enable/disable/not changed(defined) Group Policy misunderstanding. If the previous setting is enabled, changing it to not defined does not equal to disabling it. It only means that options will not be changed and remain what ever it was. So you need to make sure you change it to disabled. And all you need to change is on the default domain policy.
Andrew, MCSE (NT & W2K) + CCNA -----Original Message----- From: Salvatore Palmisano [mailto:[EMAIL PROTECTED]] Posted At: Wednesday, October 17, 2001 9:46 AM Posted To: NewsgroupDiscussion Conversation: GPO Password Issues Subject: GPO Password Issues Im testing the GPO usage with a few Win2000 machines. Right now there are two active directory DCs (Win2000 Server SP2) and one workstation (Win2000 Pro SP2). I created a user, created a GPO, altered a few of the GPO's options (password length, history, remembrance, a few others, etc) and made sure they were applied to the workstation. They were. I then tried to add another user, and Active Directory Users and Computers is telling me I cannot add the new user because the password policy conflicts with the password Im using for the user. After reading half a dozen or so KB articles on the GPO, I made sure the Domain Controller Policy, Local Security Policy, and the Default Domain Policy all had every setting to 'not defined'. I even reset my custom GPO to 'not defined'. Nothing...I still cannot add a new user. I then deleted my custom GPO altogether and made sure the changes were apparent on both DCs and that no policy settings were conflicting (none were defined!). I STILL cannot add a new user. The error message is: "Windows cannot set the password for UserTest because the password does not meet the password policy requirements......." My question is, where else would the password settings be conflicting other than in Domain Controller Security Policy, Local Security Policy, Default Domain Security Policy and my custom policy (now deleted). Any help is appreciated. Thanks. --Salvatore --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.286 / Virus Database: 152 - Release Date: 10/9/2001 ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED] ------ You are subscribed as [email protected] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED]
