Unlinking security policy

[Guest]

Hello,

I'm currently playing with security policy in test environment.
I created test sec. policy and link it to domain object, default domain
policy hasn't been changed in any way.
New settings worked just fine: password length and complexity, account
lockout etc.
I tried to unlink sec. policy just to be sure that I can roll back to
initial state when only default domain policy exist. After unlinking gpo all
sec settings still remain active -- I should use complex and long
passwords,lockout setting etc, it looks like somewhere link is still exists.
I will be very grateful for any help,
Thanks,
Gary.

 

[Mark Renoden [MSFT]]

Hi Gary

Security policies tend to be "tattood" into the registry when policy
applies. This is different to .ADM (Administrative) based policy where the
settings can be removed by removing the GPO. To undo the settings you've
configured, you need to implement a new security policy that reverses them.

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.