New to GP

[JHP]

I'm new to Group Policies, but not to Win2000...

I've tried to create a Group Policy, but without success - this is what I
did:

From ADU&C I created a new OU
I created a new Group inside the OU
I added myself as a member
From the OU Properties - Group Policy tab I created a new GP
From the Options button I enabled No Override
From the Properties button - Security tab I made sure that Apply Group
Policy was checked
From the Edit button - Computer Configuration - Security Settings - Account
Policies - Password Policy...
I set the Minimum Password Length to 8 characters

I tested the policy by changing my password to 3 characters - which it
did... WHY?

Your help is appreciated, and needed.

 

[Darren Mar-Elia]

Domain Account Policies can only be configured on a GPO linked to the
Domain. OU-linked GPOs that set account policy are ignored by domain user
accounts.

 

[JHP]

Thank you for your help...

This is probably a really basic question, but how do I set up a Group Policy
for a certain group of people without using Organizational Units?
Using the SUS white paper I managed to set up a Group Policy for Automatic
Updates, but I also need to setup policies for separate groups?

Thanks again!

 

[Darren Mar-Elia]

No problem. You do that by controlling permissions on the GPO so that only
certain groups have the "read" and "apply group policy" permissions. The
best tool to do this is the Microsoft GPMC--it prevents you from having to
muck with the ACL editor. I would get that tool from MS' download site.

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
Check out http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Whitepapers and Utilities for all things Group Policy-related

 

[JHP]

Thanks very much for your help - I will have to get used to the GPMC, at
first glance it's more confusing, but I definitely see its potential.

Are there any basic rules to using GP's... I know that they only apply to
Sites, Domains, and OU's... but as you stated you cannot use a GP with an OU
when it pertains to an Account Policy?

If there to numerous to list would you have the location of a white paper
with this information?

Thank you!

 

[Darren Mar-Elia]

There are best practices on using GP, for sure. Best place to start if you
want more info is the Technet GP Website:
http://www.microsoft.com/technet/pr...r2003/technologies/management/gp/default.mspx

Also, I maintain www.gpoguy.com, which has some whitepapers and FAQs, among
other things, related to GP.

Jeremy Moskowitz maintains www.gpanswers.com with a GP Q&A forum

Finally there are a myriad of books and articles on the topic. Check out my
free, though somewhat dated, ebooks on GP at www.realtimepublishers.com and
Jeremy's book on GP (on Amazon). Go to the Windows IT Pro Magazine website
and search on GP articles and you'll find volumes of articles related to the
topic. Lots of resources!

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
Check out http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Whitepapers and Utilities for all things Group Policy-related

 

[JHP]

Thanks for all your help - I just added it to my favorites.