PC Review


Reply
Thread Tools Rate Thread

Default domain policy

 
 
user
Guest
Posts: n/a
 
      7th Feb 2006
Hi, hope someone can help!

The only settings used in our default domain policy are in computer
config/account policies and are
passwords to remember: 0
minimum length: 3
max age: 42
min age: 30

My problem is I want to change these settings and have done but the changes
don't have any effect.
I can still use 3 character passwords when the setting is changed to 6
I've enabled the account lockout so it is set to lockout for 60 mins after 5
bad logon attempts but this fails also.

Any thoughts where this is going wrong?

Cheers


 
Reply With Quote
 
 
 
 
bryan.travis@gmail.com
Guest
Posts: n/a
 
      7th Feb 2006

user wrote:
> Hi, hope someone can help!
>
> The only settings used in our default domain policy are in computer
> config/account policies and are
> passwords to remember: 0
> minimum length: 3
> max age: 42
> min age: 30
>
> My problem is I want to change these settings and have done but the changes
> don't have any effect.
> I can still use 3 character passwords when the setting is changed to 6
> I've enabled the account lockout so it is set to lockout for 60 mins after 5
> bad logon attempts but this fails also.
>
> Any thoughts where this is going wrong?
>
> Cheers


 
Reply With Quote
 
bryan.travis@gmail.com
Guest
Posts: n/a
 
      7th Feb 2006
Hi,
Double check the group membership to make sure that the groups that are
to be receiving the policy are listed as "apply policy" under the
Advanced Settings. If this fails I would try manually replicating the
changes to see if this works!


user wrote:
> Hi, hope someone can help!
>
> The only settings used in our default domain policy are in computer
> config/account policies and are
> passwords to remember: 0
> minimum length: 3
> max age: 42
> min age: 30
>
> My problem is I want to change these settings and have done but the changes
> don't have any effect.
> I can still use 3 character passwords when the setting is changed to 6
> I've enabled the account lockout so it is set to lockout for 60 mins after 5
> bad logon attempts but this fails also.
>
> Any thoughts where this is going wrong?
>
> Cheers


 
Reply With Quote
 
Florian Frommherz
Guest
Posts: n/a
 
      7th Feb 2006
Howdy!

user wrote:
> The only settings used in our default domain policy are in computer
> config/account policies and are


So - you did override the existing default domain policy or created a
new one yourself?

> My problem is I want to change these settings and have done but the changes
> don't have any effect.


You waited for the computer to apply the changes (afaik 90 minutes + a
random number of minutes - max 30)?

cheers,

Florian
--
Nachwuschsadmin aus dem Süddeutschen/Germany.
eMail: Vorname [bei] frickelsoft [Punkt] net.
 
Reply With Quote
 
user
Guest
Posts: n/a
 
      8th Feb 2006
Domain Users are set to read and apply policy.
As a test I've re-set the default domain policy so there are no policy
settings. I've then added them to a test policy on a test OU - swettings
beiuyng pasword lenght minimum 4 characters, remember 6 passwords.. All of
the other policy settings in the test OU get applied but the password policy
is still stuck as 3 characters minimum, remember no passwords.

I'm just can't see where its getting this setting from!


"Florian Frommherz" <(E-Mail Removed)> wrote in
message news:%(E-Mail Removed)...
> Howdy!
>
> user wrote:
>> The only settings used in our default domain policy are in computer
>> config/account policies and are

>
> So - you did override the existing default domain policy or created a new
> one yourself?
>
>> My problem is I want to change these settings and have done but the
>> changes don't have any effect.

>
> You waited for the computer to apply the changes (afaik 90 minutes + a
> random number of minutes - max 30)?
>
> cheers,
>
> Florian
> --
> Nachwuschsadmin aus dem Süddeutschen/Germany.
> eMail: Vorname [bei] frickelsoft [Punkt] net.



 
Reply With Quote
 
Mike Matheny
Guest
Posts: n/a
 
      8th Feb 2006
Make sure that the policy for that OU is set to Enforced.

--

Mike Matheny

"user" <a> wrote in message news:(E-Mail Removed)...
> Domain Users are set to read and apply policy.
> As a test I've re-set the default domain policy so there are no policy
> settings. I've then added them to a test policy on a test OU - swettings
> beiuyng pasword lenght minimum 4 characters, remember 6 passwords.. All of
> the other policy settings in the test OU get applied but the password
> policy is still stuck as 3 characters minimum, remember no passwords.
>
> I'm just can't see where its getting this setting from!
>
>
> "Florian Frommherz" <(E-Mail Removed)> wrote in
> message news:%(E-Mail Removed)...
>> Howdy!
>>
>> user wrote:
>>> The only settings used in our default domain policy are in computer
>>> config/account policies and are

>>
>> So - you did override the existing default domain policy or created a new
>> one yourself?
>>
>>> My problem is I want to change these settings and have done but the
>>> changes don't have any effect.

>>
>> You waited for the computer to apply the changes (afaik 90 minutes + a
>> random number of minutes - max 30)?
>>
>> cheers,
>>
>> Florian
>> --
>> Nachwuschsadmin aus dem Süddeutschen/Germany.
>> eMail: Vorname [bei] frickelsoft [Punkt] net.

>
>



 
Reply With Quote
 
user
Guest
Posts: n/a
 
      9th Feb 2006
Resolved by setting 'no override' on the default domain policy.

Thanks to all who posted!



"Mike Matheny" <mikemathenyathoustondotrrdotcom> wrote in message
news:(E-Mail Removed)...
> Make sure that the policy for that OU is set to Enforced.
>
> --
>
> Mike Matheny
>
> "user" <a> wrote in message news:(E-Mail Removed)...
>> Domain Users are set to read and apply policy.
>> As a test I've re-set the default domain policy so there are no policy
>> settings. I've then added them to a test policy on a test OU - swettings
>> beiuyng pasword lenght minimum 4 characters, remember 6 passwords.. All
>> of the other policy settings in the test OU get applied but the password
>> policy is still stuck as 3 characters minimum, remember no passwords.
>>
>> I'm just can't see where its getting this setting from!
>>
>>
>> "Florian Frommherz" <(E-Mail Removed)> wrote in
>> message news:%(E-Mail Removed)...
>>> Howdy!
>>>
>>> user wrote:
>>>> The only settings used in our default domain policy are in computer
>>>> config/account policies and are
>>>
>>> So - you did override the existing default domain policy or created a
>>> new one yourself?
>>>
>>>> My problem is I want to change these settings and have done but the
>>>> changes don't have any effect.
>>>
>>> You waited for the computer to apply the changes (afaik 90 minutes + a
>>> random number of minutes - max 30)?
>>>
>>> cheers,
>>>
>>> Florian
>>> --
>>> Nachwuschsadmin aus dem Süddeutschen/Germany.
>>> eMail: Vorname [bei] frickelsoft [Punkt] net.

>>
>>

>
>



 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Default Domain Controller Policy and Default Domain Policy Paul D Microsoft Windows 2000 Group Policy 7 26th Oct 2004 01:12 AM
software restriction policy not working when running default domain policy from XP PC Gary Massengale Microsoft Windows 2000 Group Policy 2 24th Aug 2004 03:13 PM
Deleted Default Domain Controller Policy and Domain Policy - no backup James Microsoft Windows 2000 Group Policy 1 29th Apr 2004 04:40 PM
Error when changing Account Lockout policy for default domain policy Jeanne Microsoft Windows 2000 Active Directory 2 18th Nov 2003 12:22 AM
RE: TROUBLE: Missing Default Domain Policy and Default Domain Controller Policy content diasmith [MSFT] Microsoft Windows 2000 Active Directory 0 6th Oct 2003 08:44 PM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 03:59 AM.