GP Password Policy Issue

[DotNetNewbie]

Hi,

We have a Windows 2003 domain with two domain controllers. We have had a Password Policy in place for some time now, it is separate to the Default Policy as it only needs to be applied to a specific group of people.

The policy has been created at the top level of the domain and there are no OU's with block inheritance enabled. However a number of users have informed us that they do not need to comply with the password policy and can reuse the same passwords, not include complex characters etc!

By using the GP management tool I entered one of the users and looked at the results, which tells me the policy is not being enforced because it is empty. Though it is applied for other users!

On further investigation it would seem it is only users in a specific OU - though no block inheritance is enabled on that OU.

Any ideas most welcome!

Thanks in advance.

.net

 

[whyguy]

Server 2003 does not allow mixed password policies so it is the same for all users and you can't change that.

Did you do a RSOP on the user's machine? That is where you should see the "Account Policies/Password Policies" set and which GPO set it (Default Domain Policy probably).