Password Policy

[k3lvin]

Hey there

I'm trying to apply a password policy to a single OU group but it does not seem to take affect. When I try and change the password from the Ctrl + Alt + Del menu it says the following:

'Your password must be at least 4 characters, cannot repeat any of your previous 24 passwords and must be at least 1 days old. Please type a different password. Type a password which meets these requirements in both text boxes'

This is nothing like the password policy I made so it seems to be using a different one. I have gone through all my other policies on our domain and there are no other password policies set.

Ive rebooted the test client and enforced the policy

Windows Server 2003
Client Windows XP SP3

Any help will be great, thanks

 

[TechyMcSe2k]

This policy should be set within the Default Domain Policy GPO

Password policies in an OU won't help you on anything with domain accounts; they only influence the password policies for *local* accounts on the machines in the OU. The Windows password policy is domain wide, no exceptions.

If it is a local machine account, then check that machines local policy

 

[k3lvin]

So what happens if you want to create more than one password policy? For example my company wants a senior staff policy, (90 day expire) and a standard password policy (180 day expire) Is there no way of achieving this?

Thanks for your help

 

[lhuegele]

Convince the powers that be to have one policy for everyone. It will save time and money because it will be easier to manage and maintain going forward.

Of course there are ways to do it, but at what cost and to what benefit?

Good luck,

 

[TechyMcSe2k]

You would need a third party app for this.

 

[Roadki11]

Or a windows 2008 DC.



RoadKi11

"This apparent fear reaction is typical, rather than try to solve technical problems technically, policy solutions are often chosen." - Fred Cohen