Setting password policy lower down from domain level

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

What are the effects of setting a different password policy than your
domain password policy at a lower ou level.

does it just not work and does this behaviour change in any way when
you use windows 2003 active directory.

Thanks

Glenn

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Password policies set on the OU level take affect when logging on locally to
a computer in that OU.


hth
DDS W 2k MVP MCSE

"Glenn M" <glenn.mantle@bt.com> wrote in message
news:328a5de4.0503230820.6498aaca@posting.google.com...
> What are the effects of setting a different password policy than your
> domain password policy at a lower ou level.
>
> does it just not work and does this behaviour change in any way when
> you use windows 2003 active directory.
>
> Thanks
>
> Glenn

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Glenn,

As Paul points out, this is something that is set at the domain level only
and will not work at a lower OU. This is by design and will not change
between 2000 and 2003 Server. Remember, domains, not OUs, are security
policy boundaries.

--
Ryan Hanisco
MCSE, MCDBA
FlagShip Integration Services
Chicago, IL

"Glenn M" <glenn.mantle@bt.com> wrote in message
news:328a5de4.0503230820.6498aaca@posting.google.com...
> What are the effects of setting a different password policy than your
> domain password policy at a lower ou level.
>
> does it just not work and does this behaviour change in any way when
> you use windows 2003 active directory.
>
> Thanks
>
> Glenn

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

"Glenn M" <glenn.mantle@bt.com> wrote in message
news:328a5de4.0503230820.6498aaca@posting.google.com...
> What are the effects of setting a different password policy than your
> domain password policy at a lower ou level.

On domain accounts: Nothing.

> does it just not work and does this behaviour change in any way when
> you use windows 2003 active directory.

It just doesn't work for Domain account logons.

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

This may help clarify things:
-- http://www.msresource.net/content/view/36/46/


--

Paul Williams

http://www.msresource.net/
http://forums.msresource.net/