Word :    Username :           
 

Archived from groups: microsoft.public.win2000.group_policy (More info?)

 

Hello,


Currently, we have a password policy defined at the domain level. We are
trying to impose tighter password policy for a group of users, what would be
the best and easiest way to do so? thank you in advance. (w2k sp4)

Sponsored Links
Register or log in to remove.

Archived from groups: microsoft.public.win2000.group_policy (More info?)

 

We are
> trying to impose tighter password policy for a group of users, what would
> be the best and easiest way to do so? thank you in advance. (w2k sp4)

Create a new domain. Differing account policies is one determining factor as
to whether to create another domain or not.
You can have only one account policy per domain. Creating a password policy
on an OU will have no affect when logging onto the domain. Account policies
applied at the OU level only take affect when logging in locally on a
computer in the OU the account policy is applied to.

If the domain has sensitive enough information for a tighter password policy
not applying that password policy to the entire domain amounts to the admin
creating a security hole.


hth
DDS W 2k MVP MCSE

"Henry" <Henry@fake.com> wrote in message
news:uw1dNVzdFHA.3488@tk2msftngp13.phx.gbl...
> Hello,
>
>
> Currently, we have a password policy defined at the domain level. We are
> trying to impose tighter password policy for a group of users, what would
> be the best and easiest way to do so? thank you in advance. (w2k sp4)
>

Reply to Anonymous
- 0 +

Archived from groups: microsoft.public.win2000.group_policy (More info?)

 

Thanks. DOH, it's not what I expected!


"Danny Sanders" <Danny.Sanders@NO-SPAMcpcmed.org> wrote in message
news:uKTSCozdFHA.2500@TK2MSFTNGP10.phx.gbl...
> We are
>> trying to impose tighter password policy for a group of users, what would
>> be the best and easiest way to do so? thank you in advance. (w2k sp4)
>
> Create a new domain. Differing account policies is one determining factor
> as to whether to create another domain or not.
> You can have only one account policy per domain. Creating a password
> policy on an OU will have no affect when logging onto the domain. Account
> policies applied at the OU level only take affect when logging in locally
> on a computer in the OU the account policy is applied to.
>
> If the domain has sensitive enough information for a tighter password
> policy not applying that password policy to the entire domain amounts to
> the admin creating a security hole.
>
>
> hth
> DDS W 2k MVP MCSE
>
> "Henry" <Henry@fake.com> wrote in message
> news:uw1dNVzdFHA.3488@tk2msftngp13.phx.gbl...
>> Hello,
>>
>>
>> Currently, we have a password policy defined at the domain level. We are
>> trying to impose tighter password policy for a group of users, what would
>> be the best and easiest way to do so? thank you in advance. (w2k sp4)
>>
>
>

Reply to henry
Tom's Hardware > Forum > Windows 2000/NT > Windows 2000/NT General Discussion > Password security policy
Go to:

There are 1317 identified and unidentified users. To see the list of identified users, Click here.

Please mind

You are about to answer a thread that has been inactive for more than 6 months.
If you still wish to proceed, please ensure that your posting is original and does not duplicate or overlap any prior responses to this thread.

Add a reply Cancel
Sponsored links
  • Ask the community now
  • Publish
Ad
They won a badge
Join us in greeting them