Account policy works only at domain level

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

I've tried to create an account policy for limit password change limits but
it works only if the policy is created at domain level (where also Default
Domain Policy is present).
If I create the same policy at OU level, no setting is applied.

We have a w2000 domain in mixed mode with one NT4 BDC running.

Thanks
Corrado

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

That is by design and one of the few settings that do not work like other GP
settings. For domain users, account policy can only be configured at the domain level
with no workarounds. If you configure at the OU level it will however be enforced on
local user accounts for computers in that OU. -- Steve



"Corrado" <test@me.com> wrote in message
news:uH%23XFrVTEHA.3420@TK2MSFTNGP12.phx.gbl...
> I've tried to create an account policy for limit password change limits but
> it works only if the policy is created at domain level (where also Default
> Domain Policy is present).
> If I create the same policy at OU level, no setting is applied.
>
> We have a w2000 domain in mixed mode with one NT4 BDC running.
>
> Thanks
> Corrado
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Thank you Steven,
so I can stop to make me crazy understanding this strange thing.

bye
Corrado


"Steven L Umbach" <n9rou@nospam-comcast.net> ha scritto nel messaggio
news:CPjxc.67949$Ly.62324@attbi_s01...
> That is by design and one of the few settings that do not work like other
GP
> settings. For domain users, account policy can only be configured at the
domain level
> with no workarounds. If you configure at the OU level it will however be
enforced on
> local user accounts for computers in that OU. -- Steve
>
>
>
> "Corrado" <test@me.com> wrote in message
> news:uH%23XFrVTEHA.3420@TK2MSFTNGP12.phx.gbl...
> > I've tried to create an account policy for limit password change limits
but
> > it works only if the policy is created at domain level (where also
Default
> > Domain Policy is present).
> > If I create the same policy at OU level, no setting is applied.
> >
> > We have a w2000 domain in mixed mode with one NT4 BDC running.
> >
> > Thanks
> > Corrado
> >
> >
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

How can i enforce on local user accounts for computers in that OU?

"Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
news:CPjxc.67949$Ly.62324@attbi_s01...
> That is by design and one of the few settings that do not work like other
GP
> settings. For domain users, account policy can only be configured at the
domain level
> with no workarounds. If you configure at the OU level it will however be
enforced on
> local user accounts for computers in that OU. -- Steve
>
>
>
> "Corrado" <test@me.com> wrote in message
> news:uH%23XFrVTEHA.3420@TK2MSFTNGP12.phx.gbl...
> > I've tried to create an account policy for limit password change limits
but
> > it works only if the policy is created at domain level (where also
Default
> > Domain Policy is present).
> > If I create the same policy at OU level, no setting is applied.
> >
> > We have a w2000 domain in mixed mode with one NT4 BDC running.
> >
> > Thanks
> > Corrado
> >
> >
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Create a GPO for that OU or modify an existing one to have the account policy you
want for local users that log onto the computers in that OU. Configure under computer
configuration/Windows settings/security settings/account policies. --- Steve


"G. Ettlin" <ettling@adinet.com.uy> wrote in message
news:%23LBT%231xTEHA.2844@TK2MSFTNGP12.phx.gbl...
> How can i enforce on local user accounts for computers in that OU?
>
> "Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
> news:CPjxc.67949$Ly.62324@attbi_s01...
> > That is by design and one of the few settings that do not work like other
> GP
> > settings. For domain users, account policy can only be configured at the
> domain level
> > with no workarounds. If you configure at the OU level it will however be
> enforced on
> > local user accounts for computers in that OU. -- Steve
> >
> >
> >
> > "Corrado" <test@me.com> wrote in message
> > news:uH%23XFrVTEHA.3420@TK2MSFTNGP12.phx.gbl...
> > > I've tried to create an account policy for limit password change limits
> but
> > > it works only if the policy is created at domain level (where also
> Default
> > > Domain Policy is present).
> > > If I create the same policy at OU level, no setting is applied.
> > >
> > > We have a w2000 domain in mixed mode with one NT4 BDC running.
> > >
> > > Thanks
> > > Corrado
> > >
> > >
> >
> >
>
>