Account policies for domain members can only be configured at the domain level.
If it is applied at other levels then it will apply to only local machine
accounts within the scope of influence of the policy. Normally policy is
pplied -- local>site>domain>OU. --- Steve
