password policy not being enforced

[adam mccombs]

I am running windows 2000 server edition and I have set up
a password policy that requires 6 character passwords and
complexity requirements. I have set it up under domain
security policy and domain controller security policy.
Is there something else I need to set up to enforce the
policy?

 

[Jerold Schulman]

I am running windows 2000 server edition and I have set up
a password policy that requires 6 character passwords and
complexity requirements. I have set it up under domain
security policy and domain controller security policy.
Is there something else I need to set up to enforce the
policy?

It should automatically apply to domain member computers (and their users).


Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com

 

[ptwilliams]

You'll need to give a little time for this to apply. You should only apply
this at the domain level (it doesn't work from anywhere else anyway). Once
you apply the policy, you need to wait for intrasite replication and then
policy application - maximum five minutes each on DCs.

Remember this policy is applied to the DC not the clients - as the clients
authenticate with the DCs not themselves...

--


Paul Williams
_______________________________
http://www.msresource.net


Join us in our free, public forum:
http://forums.msresource.net
_______________________________

I am running windows 2000 server edition and I have set up
a password policy that requires 6 character passwords and
complexity requirements. I have set it up under domain
security policy and domain controller security policy.
Is there something else I need to set up to enforce the
policy?

It should automatically apply to domain member computers (and their users).


Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com

 

[Doug Gabbard]

You only need it in Default Domain Policy not the domain conrtroller
policy.

If it is not applying it could be for several reasons:

1. Only Windows 2000 and above read Group Policies
2. Clients are not getting the policy
In this case, check things like DNS configuration
Are the clients logged into the domain? Type "Set L" (no quotes)
at command prompt - it should show a DC as the logon server. If it
shows the client, then it is not logging into the domain.