DC Local Password Policy

[Chip Kramlich]

We just setup AD using Windows 2003 Server. I am trying to change the
password policy for the domain. I've set the policy at the domain level
and on the Domain Controller level to be identical. My problem is when
I am on a DC the password policy isn't what I've set. The local policy
is the default that was set when the system was first loaded. I am
unable to change the local policy through GPOEdit. How can I resolve
this? Please email me directly with any solutions.

Thanks,
Chip Kramlich
(e-mail address removed)

 

[Glenn L]

A DC only reads password policies linked to the domain.

You will see the original local password policies when you open gpedit.msc
on a DC.
However, the DC will ignore those settings and apply what you have
configured at the domain.