domain policy

[fred]

I work in a school and need to define separate domain
policies for students, teachers and administrators.

I've been told the best way to do this is by applying a
policy to an OU.

I've tried doing this but the policy is not being applied.

The default domain policy works ok, but obviously I need
different policies applied to different groups.

Any ideas much appreciated

Fred

 

[Oli Restorick [MVP]]

You should apply policies to OUs and use the permissions tab to apply the
policy only to certain groups.

Editing the default domain policy is not usually a good idea. It's best to
create new policies.

When you say the policy isn't being applied, is there anything in the event
logs to say what's happened?

Oli

 

[Steven Umbach]

Assuming you are talking about user configuration, then the users need to reside
in the respective OU's where the policy is applied. Keep in mind that
password/account policy for domain users can only be defined at the domain
level. The gpresult tool can help troubleshoot Group Policy problems. ---
Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;321709