force password change in active directory

[bcardona]

i need to force users to change their passwords every so many days, i set it computer configuration,password policy
in the group policy but that didnt work. any ideas.

 

[enigma99]

bcardona,
Did you do this at the default domain policy level?
Go to the top of your domain and look at the GPO there and configure all of your security settings on that.

Make sure you don't have any "block inherit" GPO's on any of your OU's that contain users.

Hope that helps.

 

[bcardona]

what i did was, say our credit dept. i want to test with them so i went into their credit(users ou) and set it there. they are blocked. is there anywhere else you would set it?

 

[kmkeshav]

http://technet2.microsoft.com/Windo...1b64-44d7-8077-b7721247eca31033.mspx?mfr=true

 

[kmkeshav]

Group Policy containing security settings (like password policy) should be applied at the domain level. If you apply this Group Policy to an OU, all these settings will be ignored.

So in your case, you cannot define security settings for the Credit department users alone. These settings have to be applied at the domain level (and will apply to all the users in the domain).

-Keshav