Default Domain Password Policy not working

[Scott]

We have set out pasword policy to change after 90 days. 90
days has passed and the password policy was not enforced.
We have changed it to change after 5 days, but still no
luck. We are not even getting the prompt that the passwod
will expire in 14 days message. Any help would be greatly
appreciated.
Single Win2k Domain
SP4
No other policies in place.

 

[Steven L Umbach]

On the domain controller run "net accounts" to see what it reports as far as password
policy. I would suggest running dcdiag on the domain controller looking for any
failed tests that may help pinpoint the problem. If you do have more than one GPO
configured at the domain level [double check to be sure - I know you stated no other
policies] , then the one at the top of the list will have the highest priority and
any password policy defined there would override the default domain policy. I would
also view the Local Security Policy on the domain controller to see what the
"effective" setting is for your password policy settings. --- Steve

 

[Scott]

Still no luck..Created new policy. Will have to wait for
it to update and troubleshoot some more. Im getting an
event ID:1202

-----Original Message-----
On the domain controller run "net accounts" to see what it reports as far as password
policy. I would suggest running dcdiag on the domain controller looking for any
failed tests that may help pinpoint the problem. If you do have more than one GPO
configured at the domain level [double check to be sure - I know you stated no other
policies] , then the one at the top of the list will have the highest priority and
any password policy defined there would override the default domain policy. I would
also view the Local Security Policy on the domain controller to see what the
"effective" setting is for your password policy settings. --- Steve

We have set out pasword policy to change after 90 days. 90
days has passed and the password policy was not enforced.
We have changed it to change after 5 days, but still no
luck. We are not even getting the prompt that the passwod
will expire in 14 days message. Any help would be greatly
appreciated.
Single Win2k Domain
SP4
No other policies in place.

.

 

[Steven L Umbach]

Event ID 1202 certainly may indicate a problem. It often is associated with other
event ID's. I suggest you try searching http://www.evenid.net for it and also search
Microsoft Knowledge Base. Check the domain container in ADUC to make sure that the
default domain policy is linked to it. You also may find the Group Policy management
Console very helpful in troubleshooting these issues. You can install it on a XP Pro
SP1 machine in the domain and use it from their to manage domain policy. Just be sure
the XP Pro machine is trusted/secure because you will need to use a domain
administrors account to use it. --- Steve

http://www.microsoft.com/windowsserver2003/gpmc/default.mspx
http://search.microsoft.com/search/search.aspx?st=a&View=en-us --- search here.

Still no luck..Created new policy. Will have to wait for
it to update and troubleshoot some more. Im getting an
event ID:1202

-----Original Message-----
On the domain controller run "net accounts" to see what it reports as far as password
policy. I would suggest running dcdiag on the domain controller looking for any
failed tests that may help pinpoint the problem. If you do have more than one GPO
configured at the domain level [double check to be sure - I know you stated no other
policies] , then the one at the top of the list will have the highest priority and
any password policy defined there would override the default domain policy. I would
also view the Local Security Policy on the domain controller to see what the
"effective" setting is for your password policy settings. --- Steve

We have set out pasword policy to change after 90 days. 90
days has passed and the password policy was not enforced.
We have changed it to change after 5 days, but still no
luck. We are not even getting the prompt that the passwod
will expire in 14 days message. Any help would be greatly
appreciated.
Single Win2k Domain
SP4
No other policies in place.

.

 

[Raven]

You have to apply the policy at the Domain level not the
container.

RAven