Password Policy- HOW??

[bran2235]

Hello everyone...
I have been instructed to implement a password policy for my Domain. Here's what I have:

-Single Domain
-Many OUs

It was my understanding that password policies are DOMAIN WIDE- right? Upon doing a little reading, it seems that this might not be the case... (help!)?

My instructions are pretty simple... EVERYONE has the same password policy... should be easy, right? Where should I implement this (Default Domain policy? Create a New GPO at the Domain Level?, Create new GPO at each OU?), etc..

Any help is greatly appreciated!

Thanks,
Brandon

 

[Roadki11]

Password policies only work from the Default Domain Policy. Its an all or nothing kind of thing.

RoadKi11

 

[markdmac]

Brandon,

Password policy in Windows 2000 is only implemented at the domain level. Edit the Default Domain Policy to set the policy. Password policies are the only policy elements that I would recommend you set in the Default Domain Policy.

To edit the policy, right click your domain name in AD Users & Computers. Choose properties. Click the GPO tab.

Edit the Default Dompain Policy.

navigate to

Computer Configuration
Windows Settings
Security Settings
Account Policies
Password Policy

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[bran2235]

Ok, thank you both!!!!
Question: We aren't technically a 2000 Domain (we are 2003- does this make any difference?)..?

 

[markdmac]

You should post in the 2003 forum inthe future then Brandon. The only difference is you will want to use GPMC to access your policy. The location of the settings within the policy remains the same.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.