Default Domain Policy - Acc
Windows Server Forum Index Windows Server
Server discussion on Windows platform.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web winserverhelp.com
Default Domain Policy - Acc

 
Post new topic   Reply to topic    Windows Server Forum Index -> Active Directory
Author Message
K.V
Guest
Posted: Fri Nov 11, 2005 5:50 pm    Post subject: Default Domain Policy - Acc Reply with quote
Hi, we are on windows 2003 domain (recently upgraded). I changed our password
policy last night (password history, complexity, etc). Looks like this is not
in effect yet. I just used a test account to set the password to a temp
password that didnot meet the complexity requirements and it worked. If the
policy were in effect this shouldn't have worked.

ANy hints.

Thanks
K.V
Back to top
SIME U via WinServerKB.co
Guest
Posted: Fri Nov 11, 2005 5:50 pm    Post subject: Re: Default Domain Policy - Acc Reply with quote
Hi

Where exactly did you change the password policy and what settings did you
use?

Regards

S

K.V wrote:
Quote:
Hi, we are on windows 2003 domain (recently upgraded). I changed our password
policy last night (password history, complexity, etc). Looks like this is not
in effect yet. I just used a test account to set the password to a temp
password that didnot meet the complexity requirements and it worked. If the
policy were in effect this shouldn't have worked.

ANy hints.

Thanks
K.V

--
Message posted via WinServerKB.com
http://www.winserverkb.com/Uwe/Forums.aspx/windows-server-ad/200511/1
Back to top
K.V
Guest
Posted: Fri Nov 11, 2005 5:50 pm    Post subject: Re: Default Domain Policy - Acc Reply with quote
I used GPMC. Group policy Objects - Default Domain Policy - Settings -
Account Policies - Password policy - Right click on password complexity -
properties or edit - computer configuration - windows settings - security
settings - Account policies - password policy.

was i wrong?

K.V

"SIME U via WinServerKB.com" wrote:

Quote:
Hi

Where exactly did you change the password policy and what settings did you
use?

Regards

S

K.V wrote:
Hi, we are on windows 2003 domain (recently upgraded). I changed our password
policy last night (password history, complexity, etc). Looks like this is not
in effect yet. I just used a test account to set the password to a temp
password that didnot meet the complexity requirements and it worked. If the
policy were in effect this shouldn't have worked.

ANy hints.

Thanks
K.V

--
Message posted via WinServerKB.com
http://www.winserverkb.com/Uwe/Forums.aspx/windows-server-ad/200511/1
Back to top
JPolicelli
Guest
Posted: Sat Nov 12, 2005 9:50 am    Post subject: Re: Default Domain Policy - Acc Reply with quote
This is the correct place to change the setting. A few questions for you...
Did you change the password for this test account using the GINA or through
AD U&C?
If you did so through the GINA, did group policy refresh on this machine
successfully after you made the change?


"K.V" wrote:

Quote:
I used GPMC. Group policy Objects - Default Domain Policy - Settings -
Account Policies - Password policy - Right click on password complexity -
properties or edit - computer configuration - windows settings - security
settings - Account policies - password policy.

was i wrong?

K.V

"SIME U via WinServerKB.com" wrote:

Hi

Where exactly did you change the password policy and what settings did you
use?

Regards

S

K.V wrote:
Hi, we are on windows 2003 domain (recently upgraded). I changed our password
policy last night (password history, complexity, etc). Looks like this is not
in effect yet. I just used a test account to set the password to a temp
password that didnot meet the complexity requirements and it worked. If the
policy were in effect this shouldn't have worked.

ANy hints.

Thanks
K.V

--
Message posted via WinServerKB.com
http://www.winserverkb.com/Uwe/Forums.aspx/windows-server-ad/200511/1
Back to top
K.V
Guest
Posted: Sat Nov 12, 2005 1:50 pm    Post subject: Re: Default Domain Policy - Acc Reply with quote
I Changed it using 'Ctrl+Alt+Del' -change password option on a users pc,
which i rebooted twice and on which i applied the gpupdate a couple of times.

Thanks
K.V

"JPolicelli" wrote:

Quote:
This is the correct place to change the setting. A few questions for you...
Did you change the password for this test account using the GINA or through
AD U&C?
If you did so through the GINA, did group policy refresh on this machine
successfully after you made the change?


"K.V" wrote:

I used GPMC. Group policy Objects - Default Domain Policy - Settings -
Account Policies - Password policy - Right click on password complexity -
properties or edit - computer configuration - windows settings - security
settings - Account policies - password policy.

was i wrong?

K.V

"SIME U via WinServerKB.com" wrote:

Hi

Where exactly did you change the password policy and what settings did you
use?

Regards

S

K.V wrote:
Hi, we are on windows 2003 domain (recently upgraded). I changed our password
policy last night (password history, complexity, etc). Looks like this is not
in effect yet. I just used a test account to set the password to a temp
password that didnot meet the complexity requirements and it worked. If the
policy were in effect this shouldn't have worked.

ANy hints.

Thanks
K.V

--
Message posted via WinServerKB.com
http://www.winserverkb.com/Uwe/Forums.aspx/windows-server-ad/200511/1
Back to top
frankcvc
Guest
Posted: Sat Nov 12, 2005 1:50 pm    Post subject: Re: Default Domain Policy - Acc Reply with quote
Is the "users PC" a domain member? If not, the Domain Security policy
wouldn't apply.

Is the user a member of an OU? If the OU blocked plicy inheritance, the
Domain security policy wouldn't apply to this user either.
--
Frank


"K.V" wrote:

Quote:
I Changed it using 'Ctrl+Alt+Del' -change password option on a users pc,
which i rebooted twice and on which i applied the gpupdate a couple of times.

Thanks
K.V

"JPolicelli" wrote:

This is the correct place to change the setting. A few questions for you...
Did you change the password for this test account using the GINA or through
AD U&C?
If you did so through the GINA, did group policy refresh on this machine
successfully after you made the change?


"K.V" wrote:

I used GPMC. Group policy Objects - Default Domain Policy - Settings -
Account Policies - Password policy - Right click on password complexity -
properties or edit - computer configuration - windows settings - security
settings - Account policies - password policy.

was i wrong?

K.V

"SIME U via WinServerKB.com" wrote:

Hi

Where exactly did you change the password policy and what settings did you
use?

Regards

S

K.V wrote:
Hi, we are on windows 2003 domain (recently upgraded). I changed our password
policy last night (password history, complexity, etc). Looks like this is not
in effect yet. I just used a test account to set the password to a temp
password that didnot meet the complexity requirements and it worked. If the
policy were in effect this shouldn't have worked.

ANy hints.

Thanks
K.V

--
Message posted via WinServerKB.com
http://www.winserverkb.com/Uwe/Forums.aspx/windows-server-ad/200511/1
Back to top
frankcvc
Guest
Posted: Sat Nov 12, 2005 5:50 pm    Post subject: Re: Default Domain Policy - Acc Reply with quote
Withdraw my comment about the OU blocking. Domain accounting policy cannot be
blocked.
--
Frank


"frankcvc" wrote:

Quote:
Is the "users PC" a domain member? If not, the Domain Security policy
wouldn't apply.

Is the user a member of an OU? If the OU blocked plicy inheritance, the
Domain security policy wouldn't apply to this user either.
--
Frank


"K.V" wrote:

I Changed it using 'Ctrl+Alt+Del' -change password option on a users pc,
which i rebooted twice and on which i applied the gpupdate a couple of times.

Thanks
K.V

"JPolicelli" wrote:

This is the correct place to change the setting. A few questions for you...
Did you change the password for this test account using the GINA or through
AD U&C?
If you did so through the GINA, did group policy refresh on this machine
successfully after you made the change?


"K.V" wrote:

I used GPMC. Group policy Objects - Default Domain Policy - Settings -
Account Policies - Password policy - Right click on password complexity -
properties or edit - computer configuration - windows settings - security
settings - Account policies - password policy.

was i wrong?

K.V

"SIME U via WinServerKB.com" wrote:

Hi

Where exactly did you change the password policy and what settings did you
use?

Regards

S

K.V wrote:
Hi, we are on windows 2003 domain (recently upgraded). I changed our password
policy last night (password history, complexity, etc). Looks like this is not
in effect yet. I just used a test account to set the password to a temp
password that didnot meet the complexity requirements and it worked. If the
policy were in effect this shouldn't have worked.

ANy hints.

Thanks
K.V

--
Message posted via WinServerKB.com
http://www.winserverkb.com/Uwe/Forums.aspx/windows-server-ad/200511/1
Back to top
 
Post new topic   Reply to topic    Windows Server Forum Index -> Active Directory All times are GMT
Page 1 of 1

 
 You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




New Topics Powered by phpBB