Cannot work block inheritance on windows 2008 domain

[qamrul2001]

Dear all,
I edit password policy on Default Domain Policy for all users & its working fine,
Recently I have created MGT_OU & move some users from Users container to MGT_OU.
I have created & modify password policy different from Default Domain Policy & apply to MGO_ GPO.
And mark Block inheritance. Apply from run command “gpupdate’
Above setting cannot work block inheritance, password policy always applying from Default Domain Policy to MGT_OU.
How can I solve this issue?

Thanks,

Qamrul

 

[kmcferrin]

You can't. The password policy is set from the default domain policy and it always takes precedence. The only way to have different password policies is to have different domains.

________________________________________
CompTIA A+, Network+, Server+, Security+
MCTS:Windows 7
MCSE:Security 2003
MCITP:Server Administrator
MCITP:Enterprise Administrator
MCITP:Virtualization Administrator 2008 R2
Certified Quest vWorkspace Administrator

 

[58sniper]

If you're using Windows Server 2008 R2, and your functional level is set to that, you can use granular password policies. But it doesn't work in the conventional way that you'd think GPOs would do it. There is some reading required to set it up.

See

http://technet.microsoft.com/en-us/library/cc770394(WS.10).aspx

Stop by the new Tek-Tips group at LinkedIn. Come say hi, look for a job, have some fun.

http://www.linkedin.com/groups/Networking-TekTipscom-forums-members-3952395

Pat Richard MVP

http://www.exchangeblogs.com/

 

[technome]

Have not implemented it, but the fine-grained password policies applies to all 2008 versions if the domain is at 2008 functional level. As 58sniper states, there is some reading.

"Fine-grained password policies are available in all editions of Windows Server 2008."

http://technet.microsoft.com/en-us/library/cc770842(WS.10).aspx

........................................
Chernobyl disaster..a must see pictorial

http://www.kiddofspeed.com/default.htm