Group Policy HELLP!!

[TweakMYbox]

OK, I have a situation that is absolutely driving me crazy.

We had originally enforced our Password Policy via the Default Domain Policy (Single Forest, Single Domain, Single Site).

Management asked that we remove the settings from the Default Domain Policy, and apply at the respective OU. No problem. Changed everything under 'Windows Settings -> Security Settings -> Account Policy to 'NOT DEFINED'

Linked a GPO to my Users & Groups OU enforcing a new password policy. The policy was supposed to change the password expiration from 45 days to 180. Users are still having to change their passwords every 45 days. Ran a RRSoP, and it confirms that my settings are not taking.

Also verified that their are no other GPO's linked to this OU that conflict. Additionally, I set the new policy to No Override to no avail. What am I missing?!



Mike Fegan, MCSE

Read about the best FREE IT tools available, and check out the 'Babe of the Week' at

http://tweakmybox.com

 

[porkchopexpress]

Password policy can only be set at the domain level, either in the default policy or in a seperate policy linked at the same level.

 

[porkchopexpress]

But this ability has been added to Longhorn server.

http://www.windowsecurity.com/articles/Longhorn-Poised-Provide-Multiple-Domain-Passwords.html

 

[TweakMYbox]

Wow - you'd think that I would know that... guess you learn something new every day.

Mike Fegan, MCSE

Read about the best FREE IT tools available, and check out the 'Babe of the Week' at

http://tweakmybox.com