Confusion over password policy/default domain policy

  • Thread starter Thread starter Lee Messenger
  • Start date Start date
L

Lee Messenger

I read somewhere that all settings for user account passwords, i.e min
length, expiration date etc, were taken from the default domain policy.

Is this correct ? Seems not.

I created a new policy, linked it to the domain, listed it above the default
domain policy and set the password expiration time to 300 days. When I run
the lockoutstatus utility t says my password will expire in 300 days.

My AD is Win2003 NAtive mode, can anyone give me he definitive answer on
this.
TIA

LM
 
Any policy set or linked at the domain level will be treated as a domain
policy. The Default Domain policy is a GPO linked at this level not the
definitive policy for this level.
 
Back
Top