Setting different password policies on OUs

[Steve Iadarola]

I have set the default domain GPO to require passwords to
be changed every 60 days. Can I change the passwords to
expire on an OU to 180 days? Or will the default domain
GPO override the 180 days? Would really like to not
require this OU to have complex passwords and change
passwords every 180 days. Is this possible. All my
attempts to block the default domain GPO will not work.
Still requires complex passwords, ect.

TIA,
Steve

 

[Danny Sanders]

In Win 2k when applying an account policy to an OU the OU account policy
will only take effect when NOT logging into the domain.
Account policies are 1 to a domain.

IMO account policies applied to an OU for all intent and purposes is a local
policy. They will not take effect until you log in locally.

hth
DDS W 2k MVP MCSE

 

[Guest]

That is what I thought. Thanks for verifying that for me.

Steve