Default Domain Policy Issue

[lanman1865]

I have an OU that needs a different password policy than the default. I set Block Inheritance, but when I try to create a user, it doesn't let me due to the password policy above. I can't seem to find why it is doing that after blocking inheritance.

I replicated between DC's too.

 

[mikiemov]

You cant set different password policies at OU level. Password policies CAN ONLY be set at Domain level.

 

[djtech2k]

And I would also add that editing the Default policy is a VERY bad idea. You should always create a new policy rather than editing the default one.

 

[PScottC]

lanman and djtech are correct. If you need a different password policy, you will have to create a second Domain in your AD forest.

BTW... If you set a password policy on anywhere that is NOT the domain root, the password portion of that policy will be ignored.

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[lanman1865]

didn't know that . I thought you coudld have an OU with a different Password Policy as the default or any policy for that matter, as long as you BLOCK INHERITANCE.