AD and do not inheret on Account password policys

  • Thread starter Thread starter Jacob McMaster
  • Start date Start date
J

Jacob McMaster

When applying a GPO to the domain/root for password
experation for admins and one for users groups to subs,
normally if you put the do not inheret on the sub of it
it won't apply the parent policy to it, and it will take
the one you have set for just that sub. But for some
reason on accounts part in the policy, the root still
overides the sub, regardless of the do not inheret. I
have thought of work arounds, but they are not as good as
getting this to work, is there something else that needs
to be applied that i overlooked for accounts GPO, the
normal GPO's work fine when using the do not inheret just
doesn't for accounts. This is in an enterprise
enviornment, specifically only for the change password
part for accounts. It has to be seperated so just using
the same time frame is not an option. Thanks if anyone
can get this, im researching right now, but yea help
would be good. You can email any info to
(e-mail address removed) as well, thanks
 
| When applying a GPO to the domain/root for password
| experation for admins and one for users groups to subs,
| normally if you put the do not inheret on the sub of it
| it won't apply the parent policy to it, and it will take
| the one you have set for just that sub. But for some
| reason on accounts part in the policy, the root still
| overides the sub, regardless of the do not inheret. I
| have thought of work arounds, but they are not as good as
| getting this to work, is there something else that needs
| to be applied that i overlooked for accounts GPO, the
| normal GPO's work fine when using the do not inheret just
| doesn't for accounts. This is in an enterprise
| enviornment, specifically only for the change password
| part for accounts. It has to be seperated so just using
| the same time frame is not an option. Thanks if anyone
| can get this, im researching right now, but yea help
| would be good. You can email any info to
| (e-mail address removed) as well, thanks
|

Domain password policies cannot be blocked. The entire domain must have the
same password policy. It is not possible to have different policies for
OU's, groups, or users. For account password policies it is an all or
nothing policy.

Chad A. Lacy
Windows 2000 Directory Services

==================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
-----Original Message-----
| When applying a GPO to the domain/root for password
| experation for admins and one for users groups to subs,
| normally if you put the do not inheret on the sub of it
| it won't apply the parent policy to it, and it will take
| the one you have set for just that sub. But for some
| reason on accounts part in the policy, the root still
| overides the sub, regardless of the do not inheret. I
| have thought of work arounds, but they are not as good as
| getting this to work, is there something else that needs
| to be applied that i overlooked for accounts GPO, the
| normal GPO's work fine when using the do not inheret just
| doesn't for accounts. This is in an enterprise
| enviornment, specifically only for the change password
| part for accounts. It has to be seperated so just using
| the same time frame is not an option. Thanks if anyone
| can get this, im researching right now, but yea help
| would be good. You can email any info to
| (e-mail address removed) as well, thanks
|

Domain password policies cannot be blocked. The entire domain must have the
same password policy. It is not possible to have different policies for
OU's, groups, or users. For account password policies it is an all or
nothing policy.

Chad A. Lacy
Windows 2000 Directory Services

==================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================
This posting is provided "AS IS" with no warranties, and confers no rights.

.
Ok, that's what we were thinking, thanks.
Click to expand...
 
Back
Top