Password policy On W2003 domain (mixed mode)

[IBI]

Hi,
my question is:
There is any way to apply different password policy at OU level ?

..or the only way is to create another domain in my forest with different policy ?

thanks
Ibi

 

[porkchopexpress]

I'm afraid the only place that password policy can be set is in the domain policy.





When you are the IT director, it's your job to make sure the IT works. If it does work they know already and if it doesn't, they don't want to hear your pathetic excuses.

 

[IBI]

very nice ...
my problem is :
first ou : 3 months password change
second ou : 6 months password change
third ou : no change


any ideas?

 

[Spirit]

Create 3 domains. Its the ONLY way.

It sucks but MS considers a Domain to be a security boundary nowadays and thats why the only place you can change this sort of thing is at the Domain level as described above......

That goes for password complexity too.....

Iain

 

[IBI]

Ok ... as I hope there was another way .....
I have do this change an on my first domain I've this problem.
I've apply a psw policy at domain level.
On Group policy modeling wizard I see my psw policy setting ok but on user configuration summary , under denied GPOs I see my policy with reason denied "Empty" .
Under my OU I've put my computer and my user and the psw policy isn't empty !
Any ideas?

Thanks
IBI