Account Policies

[HelpPls]

I have the following account policies configured at the Default Domain
Policy:

Enforce Password Policy:9
Maximum Password Age:61
Minimum Password Age:10
Minimum Password Length:8

These settings were changed from:

Enforce Password Policy:18
Maximum Password Age:30
Minimum Password Age:1
Minimum Password Length:8

However my users are still prompted to change their passwords etc..
according to the "old" settings not the news one's.

Anyone have a clue as to why?

Sean

 

[Cary Shultz [A.D. MVP]]

Sean,

Have you had the users reboot their systems since you made the changes? Or,
have you used secedit /refreshpolicy machine_policy

What happens when you enter 'net accounts' - without the quotes - on the DC?
What do you see? The new settings or the old settings? The new settings,
right?

Now, what happens if you enter 'net accounts' - without the quotes - on the
client systems? What do you see? You see the old settings, correct?

When did you make the new settings? 10 minutes ago? Two hours ago? Last
night? Without any 'user interference' it will take a bout 16 hours for all
this to trickle through.

HTH,

Cary

 

[@li p@r@ch@]

Mr. u run secedit from ur serv er then all will be ok and
your new policy will be refreshed.

 

[Guest]

Which of the servers are you referring to, The dc?