Default Domain policy different on 3 dc's

[Frankenherder]

I have 3 AD controllers. I changed the default domain policy to new PW requirements. Some users are getting prompted, some are not. I did the secedit refresh commands.

Interesting thing is I went to another DC and looked at the default domain policy, but it is different then the other ones. Actually, all 3 of them have different ones.

It appears that it is not replicating properly. i have forced replication and nothing.
Any ideas from anyone?
Thanks
Matt

 

[North323]

what do the logs say about replication? when was the last time it replicated?

 

[Frankenherder]

Logs show nothing.

I ended up resolving it myself. Downloaded GPOTOOLS.EXE from MS. Saw that all 3 servers were out of synch.

Did a lot of research. Ended up selecting a minor change in the policy. That triggered a refresh to all servers, then I changed it back. Ran GPOTOOLS.EXE and there were no more version issues.

Thanks for replying

Matt