Account Security Policy

[HelpPls]

Hi all -

I would like to set the ACCOUNT POLICY for my Windows 200 domain. Do I need
to set these in the Default Domain policy or the Default Domain Controllers
policy?

If the Default Domain policy, do I need to disable those settings in the
Default Domain Controllers policy, or vice versa?

Thanks, Sean

 

[Guest]

-----Original Message-----
Hi all -

I would like to set the ACCOUNT POLICY for my Windows 200 domain. Do I need
to set these in the Default Domain policy or the Default Domain Controllers
policy?

If the Default Domain policy, do I need to disable those settings in the
Default Domain Controllers policy, or vice versa?

Thanks, Sean


.
The account policy must be configured at the domain level

to take effect. It doesn't matter what is configured in
the domain controller policy, AD will ignore it.

 

[Chriss3]

inline/

--
Regards,

Christoffer Andersson
No email replies please - reply in the newsgroup

http://www.itsystem.se/employers.asp?ID=1

Hi all -

I would like to set the ACCOUNT POLICY for my Windows 200 domain. Do I need
to set these in the Default Domain policy or the Default Domain Controllers
policy?

Default Domain policy

 

[\Richard McCall [MSFT]\]

Account Policy pertaining to password policy has to be done at the default
domain level.
Account lockou and Kerberos policy can be set at any level

 

[Steven L Umbach]

That is contrary to my experience with domain accounts and what I have seen
published in that all account policy for domain accounts must be configured
at only the domain level. --- Steve

http://support.microsoft.com/?kbid=255550