I read somewhere that all settings for user account passwords, i.e min
length, expiration date etc, were taken from the default domain policy.

Is this correct ? Seems not.

I created a new policy, linked it to the domain, listed it above the default
domain policy and set the password expiration time to 300 days. When I run
the lockoutstatus utility t says my password will expire in 300 days.

My AD is Win2003 NAtive mode, can anyone give me he definitive answer on
this.
TIA

LM

Any policy set or linked at the domain level will be treated as a domain
policy. The Default Domain policy is a GPO linked at this level not the
definitive policy for this level.
"Lee Messenger" <(E-Mail Removed)> wrote in message
news:OnYWg$(E-Mail Removed)...
> I read somewhere that all settings for user account passwords, i.e min
> length, expiration date etc, were taken from the default domain policy.
>
> Is this correct ? Seems not.
>
> I created a new policy, linked it to the domain, listed it above the
default
> domain policy and set the password expiration time to 300 days. When I
run
> the lockoutstatus utility t says my password will expire in 300 days.
>
> My AD is Win2003 NAtive mode, can anyone give me he definitive answer on
> this.
> TIA
>
> LM
>
>