Users Can't Change Password

[AJ]

I have a single domain with about 10 OUs. Domain Security
Policy calls for all but 2 of the OUs to change password
every 60 days.

The other two OUs are not allowed to change their password.

Lately several users who should be able to change their
passwords are not able to.

I've checked their account permitsions and they should be
able to. Any thoughts?

 

[ptwilliams]

Password policy is only applied at the domain level. You cannot apply this
to OUs or other containers. This is because it applies to the Domain
Controllers (who perform the logon, authentication, etc.) not the actual
computers.

If you want different groups of computers to have different policies you'll
require multiple domains, or possibly third party solutions (but I don't
know if these exist).

--

Paul Williams
_________________________________________
http://www.msresource.net


Join us in our new forums!
http://forums.msresource.net
_________________________________________


I have a single domain with about 10 OUs. Domain Security
Policy calls for all but 2 of the OUs to change password
every 60 days.

The other two OUs are not allowed to change their password.

Lately several users who should be able to change their
passwords are not able to.

I've checked their account permitsions and they should be
able to. Any thoughts?