difference between local settings and effective settings

  • Thread starter Thread starter ben
  • Start date Start date
B

ben

Hi,

I changed locally on a win2000 prof computer the security settings of the
passwords: i set the maximum age at 0. Now i can read 0 under 'local
settings', but under 'effective settings, it's still 42 days.

What does mean 'effective settings' and how to put it to 0?

Thanks
ben
 
If effective settings are different than local settings, that means your
computer is inheriting security policy defined settings from a higher
priority level such as domain or Organizational Unit policy. It certainly
sounds like your computer is or was at one time a member of a domain. If it
is no longer a member of a domain it may still think it is a member of a
domain. You can check My Computer/properties/computer name. If it still
shows a domain and is not supposed to be, you can change it to a workgroup
ONLY if you know the administrators local logon name and password otherwise
you may be permanently locked out of the computer. Changing to a workgroup
and rebooting may refresh Local Security Policy to where you can change it
to your needs. --- Steve
 
Ben,

The policy that you are seeing is *probably* from the Default Domain Policy
if this computer is part of a domain. Password policies are set at a
domain level and enforced from the domain. If this machine is part of a
domain, changing the policy locally will have no effect.




This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------

|
| If effective settings are different than local settings, that means your
| computer is inheriting security policy defined settings from a higher
| priority level such as domain or Organizational Unit policy. It certainly
| sounds like your computer is or was at one time a member of a domain. If
it
| is no longer a member of a domain it may still think it is a member of a
| domain. You can check My Computer/properties/computer name. If it still
| shows a domain and is not supposed to be, you can change it to a workgroup
| ONLY if you know the administrators local logon name and password
otherwise
| you may be permanently locked out of the computer. Changing to a workgroup
| and rebooting may refresh Local Security Policy to where you can change it
| to your needs. --- Steve
|
|
| | > Hi,
| >
| > I changed locally on a win2000 prof computer the security settings of
the
| > passwords: i set the maximum age at 0. Now i can read 0 under 'local
| > settings', but under 'effective settings, it's still 42 days.
| >
| > What does mean 'effective settings' and how to put it to 0?
| >
| > Thanks
| > ben
| >
| >
|
|
|
 
Back
Top